[Suggestion] podman kill on closing distrobox ephemeral

[itscool900]

Is your feature request related to a problem? Please describe.
Yeah. On my system (Void musl), podman stop does not stop a rootless container, erroring with Error: given PID did not die within timeout. Thus the container does not actually get deleted, defeating the point of having an 'ephemeral' container.

Describe the solution you'd like
In the case of podman, close ephemeral containers with podman kill. This may also require a related distrobox kill to be called by distrobox-ephemeral.

Describe alternatives you've considered
Fixing the original problem of containers not being stopped properly (I have no idea how to do this)
Running podman --rm

Additional context
On void, at least for me, I sometimes have to use sudo pkill instead of pkill. I'm not sure why. This is probably related.
podman kill always works on my system, rootless or otherwise.

[Kamorst]

I'm not sure why, but using --unshare-process with distrobox ephemeral makes the container stop properly.

[itscool900]

Same here. Thanks for the tip.

[xz-dev]

Due to that chimera-linux/cports#1718

[xz-dev]

After investigation, this is caused by incorrect cgroup v2 configuration for Podman.

To fix it, please follow:

• https://wiki.gentoo.org/wiki/Podman#Rootless_containers_under_OpenRC
• https://scqr.net/en/blog/2023/01/27/podman-43-on-artix-linux-install/
• https://wiki.alpinelinux.org/wiki/Podman

(Tested on Gentoo: /etc/containers/containers.conf is not required. Podman can auto-detect and use the correct configuration if the boot sequence is correct.)

Why does --unshare-process work fine? Because Podman uses PID namespace isolation by default (when not using --pid host). The kernel guarantees that all processes in a PID namespace are killed when PID 1 exits.

For detailed technical information, see the PR:

#1982