RHCSA RHCSA Containers and Podman 3

Question 1

What is the primary security advantage of running Podman containers in rootless mode?

Accepted Answer

Container processes run as a non-privileged user, reducing host compromise risk

Answer

Rootless containers run as a non-root user on the host, so a container escape does not grant root access to the host system.

Question 2

After running 'podman generate systemd --name myapp --files', where should you place the generated unit file to enable it for a non-root user?

Accepted Answer

~/.config/systemd/user/

Answer

User-level systemd units for rootless containers belong in '~/.config/systemd/user/' and are managed with 'systemctl --user'.

Question 3

Which command builds a container image from a Containerfile in the current directory?

Accepted Answer

podman build -t myimage .

Answer

'podman build -t myimage .' reads the Containerfile (or Dockerfile) in the current directory and tags the result as 'myimage'.

Question 4

How do you enable a user-level systemd service called 'container-myapp.service' to start at login for a non-root user?

Accepted Answer

systemctl --user enable container-myapp.service

Answer

'systemctl --user enable' manages services within the user's systemd instance; 'loginctl enable-linger' is also needed for start-at-boot.

Question 5

Which command displays real-time CPU and memory usage statistics for all running Podman containers?

Accepted Answer

podman stats

Answer

'podman stats' streams live resource utilization metrics (CPU, memory, network I/O) for running containers.

RHCSA Exam Practice Test