Skip to content

Conversation

@lzap
Copy link
Contributor

@lzap lzap commented Sep 29, 2024

This adds a completely new chapter on podman quadlet installation method. This is emerging technology which is now available in Fedora and being backported into CentOS 9 Stream. These days I deploy pretty much everything using this technique and all users familiar with systemd can easily manage such deployments. All containers in the setup are root-less, work under SELinux enforcing mode and integrates with systemd nicely including logging or health checks.

Set those secrets as temporary environmental variables, also generate a random string for HMAC secret:
HMAC=$(openssl rand -hex 13)
Copy link
Contributor Author

@lzap lzap Sep 29, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I hope HMAC can contain + or / characters found in base64 strings.

@unixfox
Copy link
Member

unixfox commented Sep 29, 2024

Hello,

Thank you for your contribution.

Please add this guide into the community installation guide: https://github.com/iv-org/documentation/blob/master/docs/community-installation-guide.md

Since this is a community guide and not an officially supported installation method.

@lzap
Copy link
Contributor Author

lzap commented Sep 29, 2024

Oh sure, I have missed this completely. Moved.

@unixfox unixfox merged commit 28af281 into iv-org:master Sep 29, 2024
@lzap lzap deleted the podman-systemd branch October 1, 2024 08:23
@tibequadorian
Copy link

@lzap can you update this guide for invidious-companion?

@lzap
Copy link
Contributor Author

lzap commented Oct 20, 2025

I no longer use invidious, feel free to drop it, sorry.

@redbeardymcgee
Copy link
Contributor

@tibequadorian Please check #677 and confirm it works for you.

redbeardymcgee added a commit to redbeardymcgee/invidious-documentation that referenced this pull request Nov 8, 2025
Some of lzap's original wording remains, but the guidance has been
rewritten from scratch. Perhaps their username should remain for some
time longer, but they noted that they no longer use Invidious iv-org#602 also.
unixfox pushed a commit that referenced this pull request Nov 9, 2025
* Update podman quadlet docs to include companion

The prior documentation appears to predate the introduction of the
companion container. This commit adapts the instructions to include the
new companion and some improved formatting.

* fix admonition

* correct contributor name

Some of lzap's original wording remains, but the guidance has been
rewritten from scratch. Perhaps their username should remain for some
time longer, but they noted that they no longer use Invidious #602 also.

* comment out conflicting env var

* set SELinux label for volumes

`:Z` means the volume is not shared between containers. `:z` allows
other containers to share the volume, implying read/write.

Most volumes should be labeled `:Z` unless the volume must be shared
between multiple containers.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants