Improve podman usage for vault containers

This commit is contained in:
Ohad Livne 2025-06-04 22:46:58 +03:00
parent 55aecb67ea
commit 6fdeac1fd0
Signed by: libohad-dev
GPG key ID: 34FDC68B51191A4D

View file

@ -4,11 +4,9 @@ podman --transient-store run --rm -ti \
--env WAYLAND_DISPLAY \ --env WAYLAND_DISPLAY \
--env XDG_RUNTIME_DIR=/tmp \ --env XDG_RUNTIME_DIR=/tmp \
--hostname localhost \ --hostname localhost \
--userns=keep-id \
--mount type=bind,source="${XDG_RUNTIME_DIR}"/"${WAYLAND_DISPLAY}",target=/tmp/"${WAYLAND_DISPLAY}" \ --mount type=bind,source="${XDG_RUNTIME_DIR}"/"${WAYLAND_DISPLAY}",target=/tmp/"${WAYLAND_DISPLAY}" \
--mount type=bind,readonly=true,source="${HOME}"/.keys/vaults,target=/home/user/.age/key \ --mount type=bind,readonly=true,source="${HOME}"/.keys/vaults,target=/root/.age/key \
--mount type=bind,readonly=true,source="${HOME}"/.keys/vaults.pub,target=/home/user/.age/key.pub \ --mount type=bind,readonly=true,source="${HOME}"/.keys/vaults.pub,target=/root/.age/key.pub \
--mount type=bind,source="${HOME}"/Vaults,target=/home/user/Vaults \ --mount type=bind,source="${HOME}"/Vaults,target=/root/Vaults \
--network none \ --network none \
vaulter:latest \ vaulter:latest
--execute '(set-frame-name "Vault Editor")'