3 ms·

I guess Podman[1] - I swapped to using that instead of Docker on my Linux servers a while back and it's definitely working well. [1] https://podman.io https://

I guess Podman[1] - I swapped to using that instead of Docker on my Linux servers a while back and it's definitely working well. [1] https://podman.io https://podman.io

c7DJTLrn 5y ago
I'm a Podman skeptic. Whenever I've tried these "OCI compatible" alternatives in the past it's been a painful experience because something doesn't work as expected. Podman's homepage proclaims it's as simple as "alias docker=podman" but it has never worked out for me this way. Docker is ubiquitous and significantly more battle-tested, and even has a rootless mode now. And it works on Mac and PC alike.
- zimpenfish 5y ago
  > it's as simple as "alias docker=podman" but it has never worked out for me this way. For me, it was, but I'm very much not doing anything complicated - just running some services in containers with an occasional 'compose' scenario. > Docker is ubiquitous and significantly more battle-tested Sure but if you now have to pay to use Docker Desktop at your company, Podman might be a better option.
- BossingAround 5y ago
  > Docker is ubiquitous and significantly more battle-tested I think that's fair. Then again, Docker as a company has been struggling to get customers, and their practices are... Let's say highly sub-optimal. Feel free to pay for Docker. In our company, Docker is almost a curse word by now.
- truffdog 5y ago
  Yeah- https://wonky.computer/post/podman-notes/ https://wonky.computer/post/podman-notes/
- grawlinson 5y ago
  Calling docker battle tested is an extremely long stretch. It has several security issues[0], many of which are ignored by upstream as "working as intended". [0]: https://blog.newsblur.com/2021/06/28/story-of-a-hacking/ https://blog.newsblur.com/2021/06/28/story-of-a-hacking/
  - c7DJTLrn 5y ago
    I recommend appliance firewalls.
groovy-sky 5y ago
Have you tried PouchContainer (https://github.com/alibaba/pouch https://github.com/alibaba/pouch)?
- zimpenfish 5y ago
  Will definitely have a look at it once someone gets around to packaging it for Arch Linux...
  - grawlinson 5y ago
    Arch packager here, looks like this can't realistically be packaged due to a dependency (runv[0]) being deprecated at it's upstream source. A lot of these container runtimes are needlessly complicated and not very enjoyable to package, so this is why not many are available in the official repositories. [0]:https://github.com/hyperhq/runv https://github.com/hyperhq/runv
fb03 5y ago
Anyone know if we already have a proper docker-compose alternativa for podman? podman-compose seems like a toy now ;(

I guess Podman[1] - I swapped to using that instead of Docker on my Linux servers a while back and it's definitely working well. [1] https://podman.io https://podman.io

c7DJTLrn 5y ago

I'm a Podman skeptic. Whenever I've tried these "OCI compatible" alternatives in the past it's been a painful experience because something doesn't work as expected. Podman's homepage proclaims it's as simple as "alias docker=podman" but it has never worked out for me this way. Docker is ubiquitous and significantly more battle-tested, and even has a rootless mode now. And it works on Mac and PC alike.

zimpenfish 5y ago
> it's as simple as "alias docker=podman" but it has never worked out for me this way. For me, it was, but I'm very much not doing anything complicated - just running some services in containers with an occasional 'compose' scenario. > Docker is ubiquitous and significantly more battle-tested Sure but if you now have to pay to use Docker Desktop at your company, Podman might be a better option.
BossingAround 5y ago
> Docker is ubiquitous and significantly more battle-tested I think that's fair. Then again, Docker as a company has been struggling to get customers, and their practices are... Let's say highly sub-optimal. Feel free to pay for Docker. In our company, Docker is almost a curse word by now.
truffdog 5y ago
Yeah- https://wonky.computer/post/podman-notes/ https://wonky.computer/post/podman-notes/
grawlinson 5y ago
Calling docker battle tested is an extremely long stretch. It has several security issues[0], many of which are ignored by upstream as "working as intended". [0]: https://blog.newsblur.com/2021/06/28/story-of-a-hacking/ https://blog.newsblur.com/2021/06/28/story-of-a-hacking/
- c7DJTLrn 5y ago
  I recommend appliance firewalls.

groovy-sky 5y ago

Have you tried PouchContainer (https://github.com/alibaba/pouch https://github.com/alibaba/pouch)?

zimpenfish 5y ago
Will definitely have a look at it once someone gets around to packaging it for Arch Linux...
- grawlinson 5y ago
  Arch packager here, looks like this can't realistically be packaged due to a dependency (runv[0]) being deprecated at it's upstream source. A lot of these container runtimes are needlessly complicated and not very enjoyable to package, so this is why not many are available in the official repositories. [0]:https://github.com/hyperhq/runv https://github.com/hyperhq/runv

fb03 5y ago

Anyone know if we already have a proper docker-compose alternativa for podman? podman-compose seems like a toy now ;(