trfore/docker-debian13-systemd repository overview

⁠docker-debian13-systemd

A minimal systemd enabled Debian 13 (Trixie) Docker image for testing Ansible roles with Molecule.

NOTE: This image does NOT contain Ansible tooling, e.g. ansible-core or yamllint. Thus, the use case is as target host for Ansible controllers or within the Molecule create/converge/test cycle.

⁠Docker Pull Command

docker pull trfore/docker-debian13-systemd

⁠How to Build

This image is built on Docker Hub automatically any time the upstream OS image is rebuilt, and any time a commit is made or merged to the main branch. But if you need to build the image on your own locally, do the following:

1. Install docker⁠
2. Clone the repo, git clone https://github.com/trfore/docker-debian13-systemd.git
3. cd into the directory
4. Run docker build --tag trfore/docker-debian13-systemd .

⁠How to Use

⁠Within Molecule Scenario

• Add the following code to your molecule scenario file, e.g. molecule/default/molecule.yml.

  platforms:
    - name: instance
      image: trfore/docker-debian13-systemd:latest
      tmpfs:
        - /run
        - /tmp
      volumes:
        - /sys/fs/cgroup:/sys/fs/cgroup:rw
      cgroupns_mode: host
      privileged: true
      pre_build_image: true
  

  Copy

⁠Interactively Using Docker

• Install docker⁠

• Build an image locally (see above) or pull from Docker Hub: docker pull trfore/docker-debian13-systemd:latest

• On Docker with Cgroup V2 (e.g. Ubuntu 22.04), run a container from the image:

  docker run -d -it --name debian13-systemd --privileged --cgroupns=host --tmpfs=/run --tmpfs=/tmp --volume=/sys/fs/cgroup:/sys/fs/cgroup:rw trfore/docker-debian13-systemd:latest
  

  Copy

• Use it, example:

  docker exec -it debian13-systemd /bin/bash
  

  Copy

⁠Using Podman

• Podman defaults to running containers in systemd mode, --systemd=true, and will mount the required tmpfs and cgroup filesystem. See Podman Docs: Commands run --systemd⁠ for details.

  podman run -d -it --name debian13-systemd docker.io/trfore/docker-debian13-systemd:latest
  

  Copy

⁠Note on Systemd Status

Starting with systemd 256, a taint is applied when /bin and /sbin are not symlinked/merged. This image uses systemd 257.7-1, so calling systemd status you will see Tainted: unmerged-bin in the stdout. See links below⁠ for details.

⁠Additional Images

⁠References

• https://ansible.readthedocs.io/projects/molecule/⁠
• https://ansible.readthedocs.io/projects/molecule/guides/systemd-container/⁠
• https://developers.redhat.com/blog/2016/09/13/running-systemd-in-a-non-privileged-container⁠
• github runner - ubuntu 22.04⁠ preinstalled software
• github runner - ubuntu 24.04⁠ preinstalled software

⁠Systemd Unmerged Bin Taint

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085370⁠
• https://github.com/systemd/systemd/issues/35438⁠
• https://github.com/systemd/systemd/pull/38531⁠
• https://news.ycombinator.com/item?id=44852700⁠