EX188 Storage And Configuration — Timed 25 Questions

Question 1

A rootless Podman container needs to access a host directory. Due to user namespace mapping, file ownership appears different inside the container. Which flag can be added to the mount to adjust UID/GID mapping behavior if supported?

25 minute time limit — choose an answer to begin.

Accepted Answer

podman run -v /host/path:/container/path:U. Volume mount options can include specific flags, and Podman handles rootless UID/GID mapping automatically, but misconfigurations can be troubleshot using mount options. Wait, let's look at standard options like 'U' for chown.

Answer

podman run -v /host/path:/container/path:ns

Answer

podman run -v /host/path:/container/path:uid=root

Answer

podman run -v /host/path:/container/path:map

Question 2

Which THREE parameters are valid key-value pairs when using the advanced '--mount' flag with bind or volume types? (Choose THREE)

Accepted Answer

source. When using '--mount', valid keys include type, source (or src), and destination (or target/dst).

Answer

format

Question 3

An administrator runs a container with a SELinux-relabeled host directory mount using the Z option, but multiple containers need to share write access to this exact same volume. Which option should be used instead?

Accepted Answer

podman run -v /host/data:/data:z. The z option (lowercase z) shares SELinux content among multiple containers, whereas Z (uppercase Z) treats the content as private and unshared.

Answer

podman run -v /host/data:/data:O

Answer

podman run -v /host/data:/data:Z

Answer

podman run -v /host/data:/data:shared

Question 4

An engineer needs to inspect the low-level configuration details, mount points, and driver options of a named volume named 'app_vol'. Which command provides this information in JSON format?

Accepted Answer

podman volume inspect app_vol. 'podman volume inspect' retrieves detailed configuration and metadata for specified volumes.

Answer

podman volume show app_vol

Answer

podman volume status app_vol

Answer

podman inspect volume app_vol

Question 5

Where are Podman named volumes typically stored on the host file system by default for a non-root user?

Accepted Answer

~/.local/share/containers/storage/volumes/. For non-root users, Podman stores managed volume data inside their home directory under ~/.local/share/containers/storage/volumes/.

Answer

/var/lib/containers/storage/volumes/

Answer

/etc/containers/volumes/

Answer

/var/run/containers/storage/

Question 6

A developer wants to mount a host directory into a container with read-only permissions to prevent accidental data modification. Which volume option flag achieves this?

Accepted Answer

podman run -v /host/data:/container/data:ro. Appending ':ro' to a volume or bind mount specification tells Podman to mount the source path in read-only mode inside the container.

Answer

podman run --read-only-mount=/host/data

Answer

podman run -v /host/data:/container/data:rw

Answer

podman run --mount type=bind,source=/host/data,destination=/container/data,readonly=false

Question 7

An administrator needs to create a persistent storage area managed completely by Podman that does not rely on a specific host directory path. Which command should be used?

Accepted Answer

podman volume create my_data. Podman named volumes are managed by the container engine and stored in a host directory managed by Podman, unlike bind mounts which bind to a specific user-defined host path.

Answer

podman volume bind my_data

Answer

podman run -v /my_data

Answer

podman create volume my_data

Question 8

How can an administrator remove all unused, dangling Podman volumes that are not currently attached to any container?

Accepted Answer

podman volume prune. 'podman volume prune' removes all volumes that are not actively used by any container.

Answer

podman rm --volumes

Answer

podman volume rm --all

Answer

podman volume clean

Question 9

A Podman secret named 'db_password' has been created. How is this secret made accessible inside a running container?

Accepted Answer

podman run --secret db_password,type=mount myapp. The --secret flag allows mounting or injecting a secret into the container filesystem or environment.

Answer

podman run --env SECRET=db_password myapp

Answer

podman run --inject-secret db_password myapp

Answer

podman run --use-secret db_password myapp

Question 10

An application container requires multiple configuration variables defined in a local file named 'app.env'. Which flag loads these variables into the container environment?

Accepted Answer

podman run --env-file app.env myapp. The --env-file flag reads environment variables line by line from the specified file and passes them into the container.

Answer

podman run --config-file app.env myapp

Answer

podman run -e @app.env myapp

Answer

podman run --load-env app.env myapp

Question 11

An administrator needs to list all created Podman secrets on the system. Which command should they execute?

Accepted Answer

podman secret ls. 'podman secret ls' lists all available secrets managed by Podman.

Answer

podman secret list

Answer

podman secrets ls

Answer

podman system secrets

Question 12

How can an administrator remove an existing Podman secret named 'old_secret'?

Accepted Answer

podman secret rm old_secret. 'podman secret rm' deletes the specified secret from storage.

Answer

podman rm secret old_secret

Answer

podman secret delete old_secret

Answer

podman secret remove old_secret

Question 13

Which command lists all named volumes currently managed by Podman?

Accepted Answer

podman volume ls. 'podman volume ls' displays a list of all named volumes.

Answer

podman volume list

Answer

podman ls volumes

Answer

podman volume show

Question 14

Which flag is used with 'podman run' to create an ephemeral, writable container layer scratchpad that is automatically destroyed when the container stops?

Accepted Answer

podman run (no special volume flags). Standard containers created with 'podman run' are ephemeral by default unless volumes or mounts are attached.

Answer

podman run --rm-storage

Answer

podman run --volatile

Answer

podman run --ephemeral

Question 15

A container needs to read a secret named 'api_key' injected as a file at '/run/secrets/api_key'. What is the default destination path inside the container when mounting a secret without specifying a target?

Accepted Answer

/run/secrets/. By default, Podman mounts secrets into /run/secrets/ inside the container using the secret's name as the filename.

Answer

/var/run/secrets/

Answer

/app/secrets/

Answer

/etc/secrets/

Question 16

An administrator wants to create a named volume using a specific volume driver instead of the default local driver. Which flag should be used with 'podman volume create'?

Accepted Answer

podman volume create --driver nfs my_vol. The --driver (or -d) flag specifies the volume driver to use for managing the volume.

Answer

podman volume create --storage-driver nfs my_vol

Answer

podman volume create --plugin nfs my_vol

Answer

podman volume create -t nfs my_vol

Question 17

An engineer needs to mount a host directory using the advanced '--mount' syntax instead of '-v'. Which syntax correctly specifies a bind mount?

Accepted Answer

podman run --mount type=bind,source=/host/path,destination=/container/path myapp. The '--mount' flag uses comma-separated key-value pairs like type=bind,source=...,destination=...

Answer

podman run --mount /host/path:/container/path:bind myapp

Answer

podman run --mount source=/host/path,target=/container/path myapp

Answer

podman run --mount bind:/host/path:/container/path myapp

Question 18

When configuring an environment file for use with '--env-file', how are comment lines designated?

Accepted Answer

Using '#' at the beginning of the line. Lines beginning with the hash character (#) are treated as comments in Podman environment files.

Answer

Using '//' at the beginning of the line

Answer

Using ';' at the beginning of the line

Answer

Using '/* ... */' block syntax

Question 19

Which subcommand deletes one or more specific named volumes?

Accepted Answer

podman volume rm. 'podman volume rm' removes specified named volumes.

Answer

podman volume drop

Answer

podman volume delete

Answer

podman rm volume

Question 20

An administrator needs to pass a single environment variable directly on the command line when starting a container. Which flag accomplishes this?

Accepted Answer

podman run -e DB_HOST=localhost myapp. The --env or -e flag defines environment variables for the container.

Answer

podman run --set-env DB_HOST=localhost myapp

Answer

podman run -v DB_HOST=localhost myapp

Answer

podman run --variable DB_HOST=localhost myapp