[kicbase] Proposal: install podman from binary tgz, not from deb

[afbjorklund]

The packages we are using for podman are not supported anymore, upstream.

The latest release is 3.4.2, while source releases exist for 3.4.3 through 3.4.7

https://github.com/containers/podman/releases

So need to stop using "Kubic", and instead build and install from a binary tarball.

---

Unfortunately this also involves a bunch of other support packages:

# Install cri-o/podman dependencies:
RUN export ARCH=$(dpkg --print-architecture | sed 's/ppc64el/ppc64le/') && \
    sh -c "echo 'deb https://downloadcontent.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list" && \
    curl -LO https://downloadcontent.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_20.04/Release.key && \
    apt-key add - < Release.key && \
    if [ "$ARCH" != "ppc64le" ]; then \
        clean-install containers-common catatonit conmon containernetworking-plugins cri-tools podman-plugins crun; \
    else \
        clean-install containers-common conmon containernetworking-plugins crun; \
    fi

# install podman
RUN export ARCH=$(dpkg --print-architecture | sed 's/ppc64el/ppc64le/') && \
    if [ "$ARCH" != "ppc64le" ]; then sh -c "echo 'deb http://downloadcontent.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04/ /' > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list" && \
    curl -LO https://downloadcontent.opensuse.org/repositories/devel:kubic:libcontainers:stable/xUbuntu_20.04/Release.key && \
    apt-key add - < Release.key && \
    clean-install podman && \
    addgroup --system podman && \
    mkdir -p /etc/systemd/system/podman.socket.d && \
    printf "[Socket]\nSocketMode=0660\nSocketUser=root\nSocketGroup=podman\n" \
           > /etc/systemd/system/podman.socket.d/override.conf && \
    mkdir -p /etc/tmpfiles.d && \
    echo "d /run/podman 0770 root podman" > /etc/tmpfiles.d/podman.conf && \
    systemd-tmpfiles --create; fi

• [kicbase] Proposal: install containerd (and docker) from binary tgz, not from deb #11327

[afbjorklund]

We can leave the cri-o packages (for now), even if they do have their share of problems:

• Supply package cache for minikube container runtimes #9552

i.e. kubic often breaks the build:

• Manually download and installing crio deb packages #14140
• Use crio mirror #14141

[afbjorklund]

Preferrably this installation should be made separate from the image, and just "cached":

• Separate container runtimes from the image #9989

[afbjorklund]

Don't really want to build tarballs, so the first step would be to try to rebuild and host the podman deb packages.

Similar to what was needed before...

• podman build fails in kicbase image #8063

[ccamacho]

@afbjorklund do you think is possible to build a podman 4.x .deb/.rpm using fpm?

[afbjorklund]

Not so interested in podman4, and not sure if fpm would help building the debs

[afbjorklund]

I think the kubic podman will do for now, even if upgrading to 3.4.7 would be good

• Supply package cache for minikube container runtimes #9552