3 ms·

It's probably people using podman incorrectly. You can sudo with podman but you don't have to. Check out a recent talk on podman from the last Kubecon by Dan Wa

It's probably people using podman incorrectly. You can sudo with podman but you don't have to. Check out a recent talk on podman from the last Kubecon by Dan Walsh (https://www.youtube.com/watch?v=HIM0HwWLJ7g&t=1885 https://www.youtube.com/watch?v=HIM0HwWLJ7g&t=1885). Also, another benefit of podman is that it doesn't use the client-server model, it's just fork+exec no daemon needed. Dan has a bunch of talks that are great introductions to podman and container security in general: - https://www.youtube.com/watch?v=ZE2nI1SwSVk https://www.youtube.com/watch?v=ZE2nI1SwSVk - https://www.youtube.com/watch?v=msdaf3lBOn0 https://www.youtube.com/watch?v=msdaf3lBOn0 - https://www.youtube.com/watch?v=YkBk52MGV0Y https://www.youtube.com/watch?v=YkBk52MGV0Y - https://www.youtube.com/watch?v=40ynATurI7k https://www.youtube.com/watch?v=40ynATurI7k [EDIT] - I did not realize that non-root podman was a 1.0 feature -- as others have noted, podman <1.0 required sudo.

rhatdan 8y ago
Well rootless podman works before 1.0, but we have had many issues to work out. Overall it works very well.
- fatherlinnux 8y ago
  Yeah, basically the "sudo" commands all over the Internet are just legacy. Historically, root was required (like docker - most people don't understand they are talking to a daemon which has root), but recently we added running as a user (aka rootless). Still the vast majority of docs you will see will refer to running with sudo or as root. That should change as rootless matures.
  - hardwaresofton 8y ago
    Since there are two redhat/podman powerhouses in this thread, first of all thanks for all the hard work! It's not like I'm anti-docker, but it has some hangups that I'll be happy to get away from when I have the chance. I feel like being tied to docker for so long made it harder to understand other tools like ctr/critool/containerd early on. Second thing -- I haven't looked into it much but do you know how the docker in docker support is in podman? Is this thread (https://github.com/containers/libpod/issues/746 https://github.com/containers/libpod/issues/746) the right one to watch?

rhatdan 8y ago

Well rootless podman works before 1.0, but we have had many issues to work out. Overall it works very well.

fatherlinnux 8y ago
Yeah, basically the "sudo" commands all over the Internet are just legacy. Historically, root was required (like docker - most people don't understand they are talking to a daemon which has root), but recently we added running as a user (aka rootless). Still the vast majority of docs you will see will refer to running with sudo or as root. That should change as rootless matures.
- hardwaresofton 8y ago
  Since there are two redhat/podman powerhouses in this thread, first of all thanks for all the hard work! It's not like I'm anti-docker, but it has some hangups that I'll be happy to get away from when I have the chance. I feel like being tied to docker for so long made it harder to understand other tools like ctr/critool/containerd early on. Second thing -- I haven't looked into it much but do you know how the docker in docker support is in podman? Is this thread (https://github.com/containers/libpod/issues/746 https://github.com/containers/libpod/issues/746) the right one to watch?