►
Description
Let's take a look at a UBI-based container and see how we can be sure it can build and run in any scenario.
How Red Hat Enterprise Linux (RHEL) users and admins can benefit their organizations and improve their careers by learning how to use containers, Kubernetes, and Red Hat OpenShift.
Learn more at https://red.ht/leveluphour
A
All
right
good
morning,
good
afternoon,
good
evening
and
welcome
to
another
episode
of
the
level
up
hour
here
on
openshift
tv
I
am
chris
short
principal
technical
marketing
manager
and
executive
producer.
Of
this
thing
we
call
open
shift
tv,
I'm
joined
by
the
illustrious
langdon
white
good
morning,
langdon.
How
are
you,
sir
good.
A
Well,
if
you,
if
you
haven't
watched
the
channel
recently,
you
can
tell
that
I
have
changed
locations
within
my
house.
I
am
out
of
the
unfinished
basement,
aka
dungeon
and
in
our
guest
bedroom.
While
the
basement
is
actually
gonna
be
finished
slowly,
but
surely
over
the
winter
and
spring
months,
so
yeah
we're
making
moves
here
in
the
short
household
as
it
were.
A
D
A
A
D
A
A
B
A
A
B
B
And
they're
relatively
small
and
easy
to
ship,
and
it's
something
that
you
could
wear
like
on
camera.
You
know
so
as
it
gets
colder
right,
so
we
thought
it'd
be
fun,
so
hopefully
they
came
out
well,
but
we
still
haven't
gotten
them
because
our
logistics
team
it
got
superseded
by
some.
You
know
real
corporate
thing.
You
know
so
yeah.
C
C
B
B
B
A
A
B
A
But
I
know
when
I
like
so
to
give
you
an
idea
of
my
morning
routine.
The
first
thing
I
do
in
the
morning
at
7
00
am,
as
I
send
out
the
like
schedule,
email
to
the
day
internally-
and
I
know
at
that
time
it's
the
day
all
around
the
world.
So
I
can
actually
say
like
happy
wednesday
to
everybody
right
like.
B
So
that's
kind
of
what
is
important,
or
at
least
I
think
it's
important.
So
that's
what
we
kind
of
want
to
talk
about
today
so
but,
as
always,
show
notes
from
last
time,
and
just
by
way
of
apology,
the
show
notes
from
the
time
before
are
also
in
the
repo
now,
even
though
they
weren't
ready
in
time
for
the
show
last
time
so,
but
both
of
them
are
there
now,
please
feel
free
to
comment
or
whatever
on
the
repo.
B
If
you
think
there's
anything
missing
or
I
glossed
over,
something
that
I
shouldn't
have
this
particular
episode
I
actually
put
in
there's
a
lot
more
further
reading
in
a
sense
than
I
normally
did,
primarily
because
of
kind
of
the
topic
area
right.
We
were
talking
about
ai
and
ml,
which
we
kind
of
glossed
over
a
lot
of
what
that
is
in
this.
C
B
Actually
went
and
worked
at
a
r
d
center
and
worked
at
on
ai
there
as
well
sort
of,
but
what
was
I
going
to
say?
Oh
so
well
so,
interestingly
enough,
because
we
did
have
like
a
good
engaging
discussion
in
the
show.
Last
time
I
have
teed
up
somebody
to
come
and
talk
some
more
about
kind
of
machine
learning,
and
specifically
the
problem
like
or
what's
interesting
about.
B
Containers
right
is
one
of
the
things
we
like
about
containers
or
images
right
is
that
you
have
something
that's
very
replicable
right,
so
it
worked
on
my
machine.
Isn't
really
a
thing
because
you
can
say
here
is
literally
what
worked
on
my
machine
now
you
can
run
it
and
it'll
work
on
your
machine
in
science
of
any
kind
really,
but
in
data
science
in
particular
shipping.
A
A
B
A
A
So
we're
super
excited
about
it
right
because
it
shows
that
what
we're
doing
here
is
is
engaging,
is
working
and
needs
more
eyeballs
right
for
lack
of
a
better
term.
So
yeah
it's
it's
it's
like
we're
growing
up
and-
and
you
know,
you're
you're,
our
lucky
guinea
pig.
I
mean
awesome,
awesome,
awesome
early.
B
A
C
A
Yeah
pretty
much
you
know
and
like
that's,
how
we've
been
describing
it
to
people
when
we
talk
about
it
right,
like
it's
just
syndication
at
that
point,
when
we
stream
to
all
these
different,
you
know
channels
right
from
facebook
to
periscope
to
youtube
and
twitch
the
oh
does
that
make
us
all
t.
Yes,
you
all
be
officially
the
level
up
our
hipsters,
because
you
were
here
before
anybody
else.
B
B
A
B
B
B
B
C
B
It's
an
open
source
font,
I
I
wanna
say
done
by
red,
hat
or
or
maybe
fedora
or
maybe
gnome,
but
I'm
pretty
sure
it's
an
open
source
font
and
I
like
it.
I
also
love
vs
code.
I
particularly
if
you
haven't
checked
it
out
and
you're
kind
of
on
the
more
advanced
front
on
the
container
world
check
out
the
remote
containers
stuff,
which
is
pretty
amazing,
not
open
source,
although
there
does
seems
to
be
an
talking
about
them
using
it.
Oh
is
it
a
google?
B
B
All
right
there's
something
there
anyways,
let's
go
ahead,
so
okay,
so
what
I
did
was,
let
me
actually
let
me
start
with
a
little
bit
more
context.
All
right,
so
here,
I'm
gonna,
throw
in
the
chat
here
is
the
repo
that
I'm
working
from,
which
is
actually
a
fork
of
christian
hernandez's
repo
on
his
helper
node
yeah,
helper
node
is
like.
C
B
Yeah
so
helper
node
is
this
thing
that
helps
you
with
openshift
and
he's
been
working
on.
I
think
maybe
kind
of
a
an
improv,
an
improvement
right
because
going
by
the
helper
node
dev2
right
so,
but
he
was
asking
me
some
questions
about
how
to
do
the
ubi
to
basically
the
problem
here
is
this
dhcp
server
so.
B
However,
available
in
the
rel
or
in
the
red
hat
or
the
rel
repos
right,
so
what
I,
when
I
looked
at
this,
so
there's
some
things
that
I
thought
this
would
be
useful
to
do,
because
we
could
kind
of
talk
about.
You
know
we're
getting
along
on
how
we've
done
containers
right,
so
I
kind
of
wanted
to
say:
okay,
let's
take
a
container
file,
that's
kind
of
in
the
wild
and
look
at
is
it?
Is
it
well
done,
or
should
we
or
can
we
do
some
improvements
to
it?
B
B
What
I
wanted
to
show,
first
and
foremost,
okay,
so
I
built
this
container.
So
we
look
at
podman
images
and
let
me
stretch
that
out
a
little
bit,
so
it's
a
little
more
legible
and
we
can
say,
let's
kind
of
jump
into
the
container
okay.
So,
first
and
foremost,
this
is
a
registered
sorry.
I
lost
the
twitch
stream
there.
It
is
okay,
so
this
is
a
registered
rel
machine.
B
B
B
And
so,
if
we
haven't
talked
about
it
on
the
show
which
we
may
not
have,
if
there's
an
entry
point
on
the
container
you're
trying
to
run
the
only
way
to
bypass
it,
is
by
passing
this
entry
point
flag.
If
you
put
bin
bash
at
the
end
of
your
run
command,
it
won't
work,
it'll
just
get
ignored
and
entry
point
will
be
there.
So
this
one
actually
has
an
entry
point.
B
I
do
it
if
for
any
container
image
that
I
didn't
directly
create
and
know
inside
and
out
and
yeah,
so
jp
dave.
I
think
sub
tab
works
if
you're
root,
but
I
but
sometimes
it
works.
I
wonder
if
I
have
pre
if
I've
done
sudo
and
I'm
still
in
the
time
window
when
sudo
is
still
not
requiring
a
password,
it
also
works.
I
think
that's
what
it
is,
but
I'm
not
sure
so
going
back
to
entry
point.
B
B
B
Yeah,
so
dhcp
server
came
from
the
rail
repo
and
what
I
found
very
confusing
about
that,
so
just
to
make
this
a
little
more
understandable,
oh
no,
I
guess
it
is
broken
correctly.
So
if
you
notice
this
enable
repo
centos
base
os
the
repo
file,
which
is
this
one
here,
which
is
fine,
that's
weird.
I
wonder
why
this
is
showing
us
all
misspelled.
B
B
So
to
clearly
state
the
problem,
basically,
is
that
I
have
two
repo
files
that
theoretically,
because
I'm
not
disabling
the
rel
repos
right
and
it's
doing
what
I
want
mind
you
or
doing
what
christian
wants
in
theory
that
it's
getting
dhcp
server.
But
we
have
two
different
repo
files
that
don't
aren't
giving
any
sort
of
indication
of
which
one
will
be
used.
B
A
C
B
B
A
C
B
That's
I
don't
know
what
that
is.
What's
e4s
e4,
okay,
here
we
go
so
this
is
the
the
real
one
we
would
be
pulling
from.
It
is
enabled
it
even
has
it
has
gpg
check
the
reason
the
centos
repo
is
still
being
used,
even
though
it's
in
enabled
equals
zero.
Here
is
because
in
the
container
file
you're
explicitly
in
your
energy
before
in
the
install
statement,
so
they
are
both
enabled
you
know
at
that
line
a.
B
A
That
jp
day
did
mention
something
in
chat
not
to
interrupt
you,
but
I
am
because
this
is
kind
of
relevant.
You
have
the
rel
repo
loaded
by
default
on
your
server
that
you
are
running
your
container
building
your
container
to
so
so
that
is
loaded
first,
then
you
tell
it
to
about
the
centos
repo,
so
that
is
what
it's
second.
Is
that
the
reason
why.
B
What
I'm
worried
about,
though,
is
I
don't
know,
I
don't
know
what
the
answer
is,
and
on
top
of
that
I
don't
know
if
in
because
I
think
this
is
a
rally
3.
I
don't
know
if
in
raleigh
4
it
changes
so
iq
and
joke
asks
about
no
subscriptions
needed
for
dnf
install
so
dnf
and
yum
on
rel.
Eight
plus
are
the
same.
Essentially,
it's
yum
is
just
three
letters
that
actually
call
dnf.
B
B
So
but
it's
not
a
complete
set
of
the
real
content,
so,
for
example,
dhcp
server,
apparently
is
not
there.
Most
of
the
databases
are
not
there,
but
apache
is
there
and
php?
Is
there
for
example?
So
it's
so
you
need
a
subscription
to
access
some
of
the
rel
content
on
ubi,
sometimes
and
the
way
we
get
it
as
I've
talked
about
before.
In
fact,
a
little
bit
today
is,
if
you're
on
a
registered
rail
box,
and
you
try
to
build
that
image.
It
will
find
the
rel
repos.
B
B
B
Yeah
so
so
lower
is
more
important.
So
if
we
make
this
priority
150,
it
will
take
it'll
prioritize
the
rail
repo
over
the
centos
repo,
always,
and
so
that
should
take
care
of
the
problem
via
priorities
and,
let's
see,
and
then
we
should
just
be
kind
of
done.
The
thing
is,
though,
what
I
also
wasn't
in
love
with
is
that
this,
because
so
this
is
kind
of
where
it
gets
a
little
bit
arguable,
but
let's
say
and
theoretically
this
is
never
going
to
happen,
but
let's
say
the
mirror
or
whatever
this.
B
B
A
The
os
manages
right,
like
I
don't
like
breaking
defaults
in
general,
so
I
tend
to
leave.
I
don't
know
like.
If,
if
you
want
to
package
the
entire
container
up,
then
yes,
you
should,
if
you
want,
if
you
know
that
you
are
declaratively
changing
things
inside
these
configuration
files-
yes,
they
should
be
in
the
container,
but
I
don't
like
to
steer
too
far
away
from
system
defaults
either.
So
you
know
like
I
would
be
of
the
mind
to
say:
okay,
your
workaround
is
prioritized.
I
would
actually
go
speed-lunking
and
figure
out
how
it
actually
worked.
B
So
the
thing
is,
I
might
do
that
if
I
was
confident
that
that
was
part
of
the
public
api
of
dnf
right
or
yeah,
and
that
it
won't
change.
That's
that's
my
bigger
concern
because
I
I
mean
to
to
christian's
point
in
the
chat.
It
works
right
now.
What
difference
does
it
make
right
all
right
so
and
and
so
there's
some
value
to
trying
to
figure
it
out
completely.
B
However,
my
you
know
this
is.
This
is
actually
one
of
the
reasons
why
the
letters
yum
still
exist
in
rel
is
because
the
vast
majority
or
the
vast
number
of
people
who've
written
scripts
that
wrap
yum.
They
consume
its
output,
they
consume.
You
know
they
change
its
input,
et
cetera,
et
cetera,
and
so
there's
a
de
facto
api
on
yum
that
nobody
ever
promised.
B
But
people
rely
on
very,
very
heavily,
so
you
know
so
I
don't
know
whether
dnf
has
declared
somewhere
along
the
way
exactly
the
way,
the
priorities
work,
and
even
if
I
figure
out
how
it
works.
I
I
mean
it's
open
source
right.
I
could
go
and
look
at
the
code.
There
is
no
guarantee
that
that
code
won't
change,
because
it's
not
part
of
the
api
does
that
make
sense
and
why
I
wouldn't.
B
B
But
I
think
the
the
part
where
I'm
not
100
clear
is,
I
don't
know
what
our
redistribution
rules
are
like.
I
assume
that
if
you
want
to
redistribute
something
you
have
to
be
a
red
hat
partner
and
that
that
redistributed
thing
has
to
be
have
a
a
check
box.
That
says
you
know
this
is
partner
approved
or
whatever
the
term
is
there's
a
certification
process,
and
I
know
we
do
this
with
container
images.
I
just
don't
know
all
the
details,
so
that
would
be
something.
B
Right
right,
I
don't
know
because
well
so
if
the
image
platform
is
an
approved
platform,
it
should
just
work.
I
I
guess
where
I
would
get
shaky
is
like,
or
it's
probably
or
I
I
assume
it's
actually
supported,
but
if
you're
really
running
a
ubi
8
container
with
a
bunch
of
stuff
installed
running
that
on
rail
7.
B
B
D
B
B
B
B
One
of
them
is
the
fedora
registry.
Another
one
is
the
centos
registry
and
another
one
is
the
red
hat
registry
and
I
think
docker
is
there
too,
but
I
think
the
priority
is
docker
is
towards
the
end
and
centos
is
in
there,
but
I
don't
think
the
rel
one
is
there.
I
don't
think
unreal,
it
has
it
at
all.
Sorry,
I
see
there's
a
question.
A
B
B
I
don't
think
christian
added
anything
else,
weird
to
it,
because
it
does
not
actually
use
the
dhcp
server
from
centos
right
it.
It
pulled
it
from
rel,
as
we
verified
with
a
dnf
list
so
yeah.
So
we
can
change
the
order
of
preference
by
using
priorities.
The
thing
is,
and
we
did
that
a
little
bit
here
by
just
adding
this
priority
flag.
The
thing
is,
I
was
going
to
investigate.
B
Can
we
use
the
real
centos
repo
from
centos,
rather
than
having
a
hard-coded
file
on
disk
that
we're
using
in
our
container
image?
And
so
in
order
to
figure
that
out?
We
would
say
well
here
we'll
use
yum,
and
I
think
people
don't
realize
that
you
can
do
yum
provides
on
any
file.
It
doesn't
have
to
be
a
binary,
so
we
can
say
you
know.
Yum
provides
this
repo
file.
D
B
A
B
B
B
So
we
get
more
caching
and
then
I
also
believe
that
this
pip
install
will
also
not
cache.
I'm
not
100
sure
that
I
didn't
try
it
for
sure,
but
because
in
a
pip
install
there's,
usually
compilation,
I'm
not
sure
if
it'll
cache,
so
you
know
the
caching
stuff
is,
you
know,
always
a
little
dicey.
So
I
I
tend
to
err
on
the
side
of
safety
in
my
mind
and
then
I'm
kind
of
on
the
fence
of
whether
we
remove
the
centos
repo,
the
the
reason
that
I
don't
want
to
remove.
B
That
is
because,
if
I
do
this
is
where
you
know,
if
you
ever
do
a
yum
update
in
the
container,
which
is
generally
bad
form,
but
sometimes
necessary,
you
won't
get
any
updates
to
that
particular.
You
know
anything
that
came
from
that
repo
right.
So
so
I
thought
we'd
play
with
that
and
see
if
that
worked,
and
but
we
have
to
let's.
D
D
D
A
A
Like
if
you're,
indeed,
if,
if
you're
using
supported
rail
instances,
you'll
be
supported
across
the
board
right
in
rel
packages
and
so
forth,
so
on
real
image,
real
packages,
real
hosts,
you're
supported
it.
The
fuzzy
area
is
when
you
take
a
fully
supported
image
right,
like
you,
built
it
on
a
rail
box
with
relic
packages,
and
you
then
run
that
image
someplace
else
on
a
non-rail
system
aka
what
happened?
What
is
the
support
structure
there?
That's
the
fuzzy
gray
area
that
we're
trying
to
figure
out
right
exactly.
B
B
D
B
A
A
C
B
We'll
just
comment
this
stuff
out,
because
this
takes
a
long
time
to
do
its
thing
and
that
way
we
don't
have
to
spend
the
rest
of
our
lives
waiting
for
the
build.
We
can
put
it
back
in
once.
We
know
this
stuff
works
much
better,
that's
my
kind
of
floating
time.
So,
let's
see
if
what
I
call
it
dhcp
new
and
I
took
out
the
entry
point.
B
B
I
have
not
pushed
it
yet,
but
it
will
be
there.
Okay,
no
sorry!
I
haven't
yeah,
it's
not
it's,
not
nice
enough
along!
Well,
that's
not
entirely
true!
Actually,
so
the
stuff
we're
doing
right
now,
we're
doing
live,
but
the
repo
that
we're
basing
it
on
is
this
one:
okay,
cool,
oh
and
make
sure?
Oh
actually,
sorry,
that's.
B
B
B
A
B
But,
as
you
can
see,
netherlands
hackum,
I
think,
is
what
we
decided,
that
that
means
is
definitely
getting
up.
There
definitely
pulling
ahead,
and
if
you
want
to
get
your
own
points,
you
can
follow
the
link.
That's
there
and
then
put
in
that
code
yourself
or
the
second
link
is
basically
a
deep
link
with
the
code
already
injected.
But
noah
friction
narendev.
B
They
are
all
on
a
youtube
playlist
if
you
are
so
inclined,
even
in
order.
No
less,
that's
a
that's
a
great
image
and
I
I'm
afraid
so
what
we're
gonna
do
next
time.
I
almost
did
it
in
time
for
this
time,
but
not
quite
is.
I
also
want
to
highlight
going
forward
the
new
people
who
have
submitted
for
internet
points,
so
they
may
have
a
lower
number,
but
right.
B
A
B
D
A
B
That's
how
you
that's,
how
you
can
improve
your
points.
You
can
also
join
the
discord
server
and
get
some
points.
Excuse
me
and
get
some
points
that
way
you
can.
You
know,
file
an
issue,
you
can
file
a
pr,
you
can
go
back
to
past
episodes
and
that's
all
there
is
to
it
and
it
looks
like
our
build
is
done.
B
B
I
mean
they
really
are.
They
really
are
pointing
at
the
same
thing.
It's
just
I
try
like
I,
I
think
I've
explained
on
the
show
before,
but
I
try
to
use
yum
whenever
on
rel,
because
I'm
looking
for
bugs
and
just
in
case
there's
something
that
doesn't
work
right,
but
I
think
it
just
points
at
the
same
thing
and
I'm
not
sure
I
know
like
the
yum
like.
B
So
as
expected,
or
as
hoped,
we're
still
getting
the
rel
version
of
dhcp
server,
we
you
know
we're
using
the
official
repo
file
which,
like
I
said,
arguable
basically
pulling
anything
from
the
internet
and
putting
it
inside
your
container
means
that
it
has
potential
of
not
being
as
replicable
right,
but
we
will
get
updates
if,
for
some
reason
we
do
an
update
in
here.
So
the
last
thing
I
kind
of
wanted
to
show
was
what
happens
if
we
unregister
it?
Does
it
still
work?
B
B
B
B
B
D
B
B
B
You
know
you
don't
get
it
as
non-root,
but
that's
that's
expected
in
a
sense
yeah.
I
mean
it's
significantly
better.
Now
I
think
it's
a
lot
less
confusing
as
well,
because
I
mean
I
normally
like
in
non-kind
of
production
environments.
Right
I
mean
I
normally
can
just
say:
subscription
manager
register
dash,
auto
attached.
B
A
B
So
what
is
the
package
difference
between
morel
base
os
and
ubi
base
os?
I
don't
know
off
the
top
my
head,
I
do
know
it's
documented
I'd
have
to
like
dig
for
it
to
know
where
it
is
exactly
but
kind
of
my
rule
of
thumb
in
the
back
of
my
mind,
is
kind
of
anything
related
to
front
end,
not
front
end
but
sort
of
front
end.
Web
development,
so
programming
languages
web
servers
that
kind
of
stuff
those
are
all
in
ubi.
B
A
A
B
B
So
otherwise
you
know
you
can
investigate
the
rest
of
the
thing
for
yourself.
I
will
talk
over
with
christian
whether
he
wants
something.
That's
like
a
pr
based
on
on
these
changes,
but
these
are.
This
is
closer
to
how
I
would
have
done
the
container
image,
and
I
thought
it
was
a
good
exercise
for
the
show
to
kind
of
see
the
difference
in
approaches
and
what
the
trade-offs
are
you're
making
when
you're
taking
different
approaches.
A
B
I
said
I
just
thought
it
was
a
good
exercise.
I
thought
it
was
an
interesting
comparison
of
two
different
approaches
to
the
same
problem
as
well
as
how
to
solve
the
problem
of
I
have
ubi
and
it
will
be
used
sometimes
by
people
on
rel
registered
machines
and
sometimes
not
right
and
and
but
that's,
I
think,
our
show
unless
anybody
had
any
more
questions.
But
I
don't
see
any
more.
A
A
Up
next
on
the
channel
at
11am
eastern
is
the
openshift
administrator's
office
hours
with
sully,
and
I
and
bring
your
openshift
questions.
We
will
bring
answers
so
right
right.
We
will
hunt
for
them
and
give
them
to
you
if
you
don't
know
them
off
the
top
of
our
head
right,
but
yeah.
So
thank
you.
Everyone
for
joining
stick
around.
You
know
subscribe
to
the
calendar
if
you
haven't
yet
I
will
drop
that
link
in
chat
here.
A
It's
just
red
dot,
ht
stream,
cal
and
you
know,
click
the
little
plus
sign
on
the
bottom
right
of
the
calendar
to
add
it
to
your
own.
That
way,
you
know
when
we're
on
the
air
and
what
we'll
be
talking
about,
and
until
next
week,
where
we'll
be
on
the
redhead
youtube
as
well,
we'll
catch
you
then
and
stay
safe
out.
There
don't
watch.