podman and PCI passthrough

[Mauricio Tavares]

What is the argument I need to properly pass a PCI or PCIe
device to a podman container at runtime (podman-run)?

[Mauricio Tavares]

On Tue, Jul 21, 2020 at 7:46 PM Mauricio Tavares  wrote:
>   What is the argument I need to properly pass a PCI or PCIe
>
> device to a podman container at runtime (podman-run)?

Argh, still thinking in docker terms. I meant podman-start[1]

[1] https://www.mankier.com/1/podman-start

[Gordon Messmer]

On 7/21/20 4:46 PM, Mauricio Tavares wrote:
>    What is the argument I need to properly pass a PCI or PCIe
>
> device to a podman container at runtime (podman-run)?

Assuming that it's supported by the OS running podman, I believe you can 
mount the device node inside the container using the --volume option.

[Daniel Walsh]

On 7/21/20 20:54, Gordon Messmer wrote:
> On 7/21/20 4:46 PM, Mauricio Tavares wrote:
> > What is the argument I need to properly pass a PCI or PCIe
> > device to a podman container at runtime (podman-run)?
>
> Assuming that it's supported by the OS running podman, I believe you
> can mount the device node inside the container using the --volume option.
> _______________________________________________
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]

If this is a standard device on /dev. then using podman run --device or
podman create --device would put the device into the container.

[Mauricio Tavares]

On Wed, Jul 22, 2020 at 6:14 AM Daniel Walsh  wrote:
> On 7/21/20 20:54, Gordon Messmer wrote:
> > On 7/21/20 4:46 PM, Mauricio Tavares wrote:
> > >    What is the argument I need to properly pass a PCI or PCIe
> > >
> > > device to a podman container at runtime (podman-run)?
> >
> > Assuming that it's supported by the OS running podman, I believe you
> > can mount the device node inside the container using the --volume option.
> > _______________________________________________
> > users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedoraproject.org/archives/list/[e-mail]
>
> If this is a standard device on /dev. then using podman run --device or
> podman create --device would put the device into the container.

How much is exposed vs abstracted using --device in podman vs in
docker? Can I also do something like

--mount type=bind,source=/sys/bus/pci/[...]

to pass the device? And does podman support --cap-add options or has
an equivalent?
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]

[Daniel Walsh]

On 7/22/20 07:57, Mauricio Tavares wrote:
> On Wed, Jul 22, 2020 at 6:14 AM Daniel Walsh  wrote:
> > On 7/21/20 20:54, Gordon Messmer wrote:
> > > On 7/21/20 4:46 PM, Mauricio Tavares wrote:
> > > >    What is the argument I need to properly pass a PCI or PCIe
> > > >
> > > > device to a podman container at runtime (podman-run)?
> > >
> > > Assuming that it's supported by the OS running podman, I believe you
> > > can mount the device node inside the container using the --volume option.
> > > _______________________________________________
> > > users mailing list -- [e-mail]
> > > To unsubscribe send an email to [e-mail]
> > > Fedora Code of Conduct:
> > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> > > https://lists.fedoraproject.org/archives/list/[e-mail]
> >
> > If this is a standard device on /dev. then using podman run --device or
> > podman create --device would put the device into the container.
>   How much is exposed vs abstracted using --device in podman vs in
>
> docker? Can I also do something like
>
> --mount type=bind,source=/sys/bus/pci/[...]

Yes this should work.
> to pass the device? And does podman support --cap-add options or has
> an equivalent?

Podman has everything that Docker has.  So yes --cap-add is supported.
> > users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]
>
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]