9 ms·

Podman Desktop 1.0

212 points by m4r71n 3y ago

pydry 3y ago
I really wish they'd give podman-compose some love.
- jadbox 3y ago
  What's missing? The release of podman desktop says it has compatibility with docker compose..
  - mati365 3y ago
    love
  - tjoff 3y ago
    Haven't transitioned to podman, yet, so maybe out of place - but: Not sure how that is relevant to podman-compose?
- dmarinus 3y ago
  you can actually use docker-compose with podman
- yrro 3y ago
  These days Podman implements the docker API, so it's easier to use docker-compose. I am not sure if there's any compelling reason to use podman-compose any more.
  - deleted 3y ago
    [deleted]
  - pydry 3y ago
    It's kind of a pain to set up a port for docker compose to talk to. podman compose is effectively 90% finished too. It's just annoying seeing some roughness around the edges. I'm not convinced it would be all that hard to make it better than docker compose, either.
    - yrro 3y ago
      I suppose it would be nice if podman.socket was enabled by default. Socket activation means that it wouldn't actaully launch podman-system-service unless something connected to it. For me the problem with podman-compose is that it will be continuously chasing the moving target of what docker-compose is able to do. Hence there will forever be developers trying it out, finding out that "it doesn't work" and, in wanting to just get on with their jobs, going back to docker-compose... and in the process filing "podman" away in that little box in the back of their head of stuff that doesn't work. Implementing the docker API seems to have worked out much better, I suppose it too is a moving target but it seems to move slower; I can at least download some demo docker-compose.yaml files and process them with docker-compose talking to podman and they worked out of the box!
- kuratkull 3y ago
  We are a Podman shop. Podman itself works fine, but for Compose we kinda have to use docker-compose (and very soon "docker compose" due to the former getting deprecated in a week). I found several major and minor issues when I fed our Compose files to podman compose, I even created a pull request for one that was easily fixable with a single line change, but I'm weary of using it for production right now. Hoping Podman compose gets some love from a big player, b/c it seems RH is only focused on Kube.
  - freedomben 3y ago
    > Hoping Podman compose gets some love from a big player, b/c it seems RH is only focused on Kube. Can you expand on this a bit? What is an example of something you'd like another player to do that RH isn't doing?
- ragnese 3y ago
  podman-compose was never official, though- was it? I'm still using it, because the last time I had time to mess with it, docker-compose still required a lot of fiddling to work with podman. From the other replies to your comment, I guess it must have gotten better, so I'll guess I'll try docker-compose again soon.
intelVISA 3y ago
To quote the great pjmlp: Let me guess, Podman desktop is an Electron app.
- leetharris 3y ago
  Yes. It is by far the easiest way to make a nice looking cross platform app. If you can't handle the extra RAM you are always welcome to use the CLI
  - intelVISA 3y ago
    Only thing I can't handle is how Red Hat, with its bllions, can't afford a few extra dollars for user-respecting, secure native GUIs.
    - ragnese 3y ago
      I hate Electron apps, too, but I've not heard people complain about security before. What's the security problem with Electron apps? I understand that you're basically running a Node.js instance for each app, but why is that more insecure than running, say, a GTK app? Since GTK and Node.js are written in C and C++, respectively, my gut instinct would be to assume they're equally likely to have security bugs.
      - wiseowise 3y ago
        Quick search https://www.cvedetails.com/vulnerability-list.php?vendor_id=17824&product_id=44696&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=0&order=1&trc=15&sha=d8dc7cad32c3a3f97ca3be583aef8b6ab5a03858 https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
      - cjbprime 3y ago
        The difference is that no-one would load remote-user-supplied C++ code at runtime and expect it not to result in vulnerability, but people remotely source JS, or allow remote-user-supplied HTML to interact with their JS, and the stakes are higher than they would be in a web browser, because Node (and therefore Electron) has APIs to e.g. read and write to your filesystem and browsers have sandboxes to block that. (Electron offers sandboxing too, but you're likely to actually want to use the OS features so it's not as simple as always disallowing the access.)
brigadier132 3y ago
Somewhat unrelated (but maybe it's actually related). I've been trying to setup a local development environment for Kubernetes on mac. On mac, docker does not allow for connecting directly to the pods, you need to either setup a tunnel or service. The problem for my use case is that each pod could have a different port and local address and a load balancer does not make sense for what I'm building which requires connecting directly to a specific pod. Does Podman solve this problem? I think the problem is dockerd on mac. As of now, I just have a completely separate environment in the cloud that I run test on but it's very inefficient. I tried switching to nerdctl and containerd but the problem is that I have existing workflows that make use of docker_init files and nerdctl breaks those.
- stonemetal12 3y ago
  >docker does not allow for connecting directly to the pods, you need to either setup a tunnel or service That isn't docker, Kubernetes is designed to work that way. To be infinitely horizontally scalable, and automatically handle pods (and servers) going down, caring about which instance you are talking to is generally a bad thing.
  - deleted 3y ago
    [deleted]
- dingledork69 3y ago
  Setting up a Kubernetes service is the way to go, though you could also use NodePort on the pods.
- andrewmackrodt 3y ago
  While this may not solve your problem, I use docker-network-connect which lets me connect directly to containers running in the 172.x.x.x range. By default, macOS does not support routing from host to containers by IP https://github.com/chipmk/docker-mac-net-connect https://github.com/chipmk/docker-mac-net-connect. In the kubernetes case (I am using k3d on my Mac) pods aren't directly routable but with metallb, load balancer IP addresses can be connected to directly and there's no worry about port conflicts as there might be with k3d's default servicelb implementation (this is my bootstrap script https://github.com/andrewmackrodt/k3d-boot https://github.com/andrewmackrodt/k3d-boot). If you need to connect to specific pods directly and it doesn't make sense to change your pod config, kubectl port-forward may suffice?
geerlingguy 3y ago
I'm excited to see this finally happen—acknowledgement that Docker Desktop has been an essential part of the process of onboarding devs (who often use the command line, but sparingly) into containerized development with a gentle on-ramp. The big question is whether Podman Desktop will be (a) stable and not a memory-hog, (b) make container workflows on Mac/Windows as simple (conceptually at least) as on Linux, and (c) be a sustainable effort for the community that's still extremely Red Hat-centric. To that last point, I still see very little adoption outside of the Red Hat ecosystem. It seems like `docker-ce` is still installed on most servers, `docker-compose` for lightweight app orchestration, and when people use Kubernetes, few people know or care what underlying container management daemon is running.
- wronglebowski 3y ago
  That’s the disconnect I also experience. Working with multiple different organizations they either . 1. Use Docker Compose and have no container strategy 2. Have a container team and an orchestration platform. Not many organizations operate in the middle ground, seems difficult to do well with little overhead.
  - hotpotamus 3y ago
    I work on an operations team of about 2.5 people who handle everything for a small SaaS company and we're slowly containerizing. New systems are built and deployed in Docker and the legacy stuff is slowly getting there. We're using Swarm which I'm thinking is probably more like the middle ground.
    - lightbulbjim 3y ago
      Docker Swarm was the dream. A shame so many were dissuaded from using it due to the potential for support to be yanked out from underneath them.
- Arcanum-XIII 3y ago
  I can write docker-compose file, run it on my laptop. Can't do that without spending 2 days of pre study with K8s. And to have it ready on a basic laptop is not fun. At all But K8s is maybe not the tool for that either.
dang 3y ago
Related: Podman Desktop: Same functionality as Docker Desktop but open source - https://news.ycombinator.com/item?id=35296165 https://news.ycombinator.com/item?id=35296165 - March 2023 (36 comments) Podman Desktop: A Free OSS Alternative to Docker Desktop - https://news.ycombinator.com/item?id=33536978 https://news.ycombinator.com/item?id=33536978 - Nov 2022 (191 comments) Podman Desktop Companion GUI – Parity on All Major Operating Systems - https://news.ycombinator.com/item?id=31055475 https://news.ycombinator.com/item?id=31055475 - April 2022 (113 comments)
teleforce 3y ago
Earlier today I was browsing the Podman desktop website and pretty sure it was at 0.15 version, and then telling some people after that Podman desktop will probably reach stable sooner rather than later. However, does not expect it to be this very soon and it's now suddenly stable at version 1.01. Apparently container software and ecosystem do move at a blazing speed.
user3939382 3y ago
I'm waiting for Podman to hit AWS ECR/ECS. Until then it's just an interesting topic. https://github.com/aws/containers-roadmap/issues/626 https://github.com/aws/containers-roadmap/issues/626
- paulddraper 3y ago
  That would be simply amazing. I love Podman but sadly not enough to run my own servers :(
- dmw_ng 3y ago
  What value is added by swapping Docker out for an alternative on ECS? It's (at least as I understand it) basically an implementation detail, and well beneath the "covered by AWS support, don't touch" surface
  - user3939382 3y ago
    You're right in a way, I really don't care what AWS does under the hood. The bigger issue is that I don't want any avoidable discrepancies between what I'm testing with on local and what I'm deploying. Obviously it's never 1:1 because my local isn't an AWS cloud infrastructure, but up til now the container engine isn't a variable.
    - acdha 3y ago
      I mean, that’s a worthy goal but it’s not necessary: discrepancies like that are uncommon and since there are many other potential differences between your desktop and the server environment you need to have a robust test suite in any case to make sure you aren’t accidentally over-coupling your code to your development system.
      - user3939382 3y ago
        > discrepancies like that are uncommon Are you saying differences between Podman and Docker are uncommon? My untested assumption is that they're not uncommon just given how new Podman is. Testing is nice but you don't want to have to wait for that to run to find issues that you could make immediately obvious without it.
kentrf 3y ago
I've been trying to get podman working with vscode and the docker extension for a while now... Only to find out yesterday I had to downgrade the extension due to differences between docker and podman.
anderspitman 3y ago
Docker Desktop provides some compelling options for lowering the barrier of entry for selfhosting. Today you can take a Windows laptop and run just about any Linux service, with pretty fast networking and host disk access. No CLI experience required. The only major missing piece is inbound networking from the internet. Tunneling[0] is my preferred solution to that problem. Or if you don't want to expose your services to the internet there's already a Tailscale extension[1]. It's exciting and important to have an open source alternative in this space. [0]: https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling [1]: https://tailscale.com/blog/docker/ https://tailscale.com/blog/docker/
BIackSwan 3y ago
I tried to use podman for a personal project. It still has lots of documentation issues/missing. Lots of little bugs and very little updates on stability. Used wsl2 and ubuntu. Eventually gave up because it was just leading from one rabbit hole to the next. Either use venv/vagrant/docker. Or just use native development workflow. Podman is not worth the pain unless its for a mid size business or bigger.
lostmsu 3y ago
Does it support GPU acceleration? On Windows?
sarahdellysse 3y ago
Anyone have any experience running Windows and WSL2 with Podman Desktop? I'm running W11, with fedora in WSL2. What I've been doing with Docker Desktop is running Docker Desktop on Windows startup, and that gives me access to the docker machine in both powershell and inside my wsl2 environment (for the latter, docker-desktop installs a binary inside fedora-wsl2 at `/usr/local/bin/docker` that communicates to the host) So far, I uninstalled Docker-Desktop and installed Podman-Desktop, and now I can run `podman` from powershell but not from fedora. I'm about to try `sudo dnf install podman` and hope it connects to the podman-machine? I dunno, it's not exactly clear
- pxc 3y ago
  > now I can run `podman` from powershell but not from fedora. I'm about to try `sudo dnf install podman` and hope it connects to the podman-machine? I dunno, it's not exactly clear One thing you could do is just symlink or wrap the Windows podman.exe as `podman` on your WSL guests, and rely on WSL interop at the CLI instead of sharing a socket. This is probably what Docker Desktop does, based on your description (I thought it (used to?) share(s) a socket from the dedicated WSL guest it creates to your other WSL guests). Alternatively, if you install Podman Desktop via Scoop and have WSL interop enabled for your guests (so that your Windows binaries appear on your Linux guests' PATHs), I think you'll get the same `podman` as your Windows PowerShell sessions access onto your WSL guests for free.
- pid-1 3y ago
  Docker Desktop: 1. In the past, created a managed WSL vm to run containers. 2. At some point, it included the option to use a WSL distro instead, but you had to tell it explicitly. 3. Nowadays it detects whether a default WSL distro is present and uses it to run containers automatically. Otherwise it creates a managed WSL distro just to run containers. As far as I understand, Podman Desktop still is at (1). You can't tell it to use your own WSL distro. > I'm about to try `sudo dnf install podman` and hope it connects to the podman-machine? I dunno, it's not exactly clear I think podman-machine is meant to be executed on the host, but worth a try anyway
Art9681 3y ago
Does the podman VM have Rosetta 2 acceleration or does it still use the slow qemu runtime on M series Macbooks? This is the main reason I switched to OrbStack which is a very promising alternative to all of this. Free for now but looks like they intend on making it a paid app in the future. The speed difference is significant.
- paulddraper 3y ago
  Ick. Doesn't it support AMD64?
- m4r71n 3y ago
  Podman still uses QEMU on Mac: https://podman.io/docs/installation#macos https://podman.io/docs/installation#macos
  - ecnahc515 3y ago
    Qemu is the hypervisor in this situation. Which doesn't necessarily preclude having Rosetta acceleration of AMD64 binaries within the ARM64 Linux guest itself. That said, as far as I know, the only official way to use Rosetta inside a Linux guest is using Virtualization.Framework, which allows mounting a Rosetta binfmt handler via Virtiofs. So it's also going to use Qemu inside the VM to handle running amd64 images, not Rosetta.
lmz 3y ago
Podman (Desktop) on Windows ate all my RAM when I left it up for a few days. Somehow it leaked wsl.exe / podman.exe process handles every time it ran the "podman machine" commands it uses to keep track of its VM.
LightFog 3y ago
I’ve been using this on Mac for a few months now. It’s great to have an alternative to Docker desktop although it doesn’t feel fully there yet, on Mac at least. What is available in the UI is slick - but so many features are missing I often just end up back in the shell. Am experiencing a lot of strange behaviours in terminal sessions via the UI also, particularly hung sessions and it being way too easy to accidentally close the session by switching Ui tabs.
CraigJPerry 3y ago
Just for fun i thought i’d try to trip this up by hosting my podman containers on a remote x64 host: x64$ podman system service -t 0 & x64$ systemctl enable --now --user podman.socket Then telling podman on my m1 macbook air to use the remote machine rather than spinning up a podman machine locally on the m1: m1$ podman system connection add fedora --identity ~/.ssh/id_rsa --port 22 ssh://craig@s1.local/run/user/1000/podman/podman.sock m1$ podman system connection default fedora but it actually works just fine \o/ either way this is pretty but i’ll stick to the cli.
- yrro 3y ago
  Dumb question but after doing that how do you go back to telling podman to use your local machine?
  - CraigJPerry 3y ago
    m1$ podman system connection list --all m1$ podman system connection default <chosen system from above command> On my macos if i install a podman machine for local vm, it’s called podman-machine-default
kplex 3y ago
Not sure I particularly trust Redhat after what they did to CentOS.
- linsomniac 3y ago
  Ok, I'll bite... What did RedHat do to CentOS?
  - heywoodlh 3y ago
    I think this is in reference to RedHat prematurely ending support for CentOS 8 and basically abandoning its former model of being a slow-moving, stable RHEL clone[0] [0] https://www.phoronix.com/news/CentOS-8-Ending-For-Stream https://www.phoronix.com/news/CentOS-8-Ending-For-Stream
- deleted 3y ago
  [deleted]
yrro 3y ago
How does it work on Enterprise editions of Windows?

Podman Desktop 1.0

212 points by m4r71n 3y ago

pydry 3y ago

I really wish they'd give podman-compose some love.

jadbox 3y ago
What's missing? The release of podman desktop says it has compatibility with docker compose..
- mati365 3y ago
  love
- tjoff 3y ago
  Haven't transitioned to podman, yet, so maybe out of place - but: Not sure how that is relevant to podman-compose?
dmarinus 3y ago
you can actually use docker-compose with podman
yrro 3y ago
These days Podman implements the docker API, so it's easier to use docker-compose. I am not sure if there's any compelling reason to use podman-compose any more.
- deleted 3y ago
  [deleted]
- pydry 3y ago
  It's kind of a pain to set up a port for docker compose to talk to. podman compose is effectively 90% finished too. It's just annoying seeing some roughness around the edges. I'm not convinced it would be all that hard to make it better than docker compose, either.
  - yrro 3y ago
    I suppose it would be nice if podman.socket was enabled by default. Socket activation means that it wouldn't actaully launch podman-system-service unless something connected to it. For me the problem with podman-compose is that it will be continuously chasing the moving target of what docker-compose is able to do. Hence there will forever be developers trying it out, finding out that "it doesn't work" and, in wanting to just get on with their jobs, going back to docker-compose... and in the process filing "podman" away in that little box in the back of their head of stuff that doesn't work. Implementing the docker API seems to have worked out much better, I suppose it too is a moving target but it seems to move slower; I can at least download some demo docker-compose.yaml files and process them with docker-compose talking to podman and they worked out of the box!
kuratkull 3y ago
We are a Podman shop. Podman itself works fine, but for Compose we kinda have to use docker-compose (and very soon "docker compose" due to the former getting deprecated in a week). I found several major and minor issues when I fed our Compose files to podman compose, I even created a pull request for one that was easily fixable with a single line change, but I'm weary of using it for production right now. Hoping Podman compose gets some love from a big player, b/c it seems RH is only focused on Kube.
- freedomben 3y ago
  > Hoping Podman compose gets some love from a big player, b/c it seems RH is only focused on Kube. Can you expand on this a bit? What is an example of something you'd like another player to do that RH isn't doing?
ragnese 3y ago
podman-compose was never official, though- was it? I'm still using it, because the last time I had time to mess with it, docker-compose still required a lot of fiddling to work with podman. From the other replies to your comment, I guess it must have gotten better, so I'll guess I'll try docker-compose again soon.

intelVISA 3y ago

To quote the great pjmlp: Let me guess, Podman desktop is an Electron app.

leetharris 3y ago
Yes. It is by far the easiest way to make a nice looking cross platform app. If you can't handle the extra RAM you are always welcome to use the CLI
- intelVISA 3y ago
  Only thing I can't handle is how Red Hat, with its bllions, can't afford a few extra dollars for user-respecting, secure native GUIs.
  - ragnese 3y ago
    I hate Electron apps, too, but I've not heard people complain about security before. What's the security problem with Electron apps? I understand that you're basically running a Node.js instance for each app, but why is that more insecure than running, say, a GTK app? Since GTK and Node.js are written in C and C++, respectively, my gut instinct would be to assume they're equally likely to have security bugs.
    - wiseowise 3y ago
      Quick search https://www.cvedetails.com/vulnerability-list.php?vendor_id=17824&product_id=44696&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=0&order=1&trc=15&sha=d8dc7cad32c3a3f97ca3be583aef8b6ab5a03858 https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
    - cjbprime 3y ago
      The difference is that no-one would load remote-user-supplied C++ code at runtime and expect it not to result in vulnerability, but people remotely source JS, or allow remote-user-supplied HTML to interact with their JS, and the stakes are higher than they would be in a web browser, because Node (and therefore Electron) has APIs to e.g. read and write to your filesystem and browsers have sandboxes to block that. (Electron offers sandboxing too, but you're likely to actually want to use the OS features so it's not as simple as always disallowing the access.)

brigadier132 3y ago

Somewhat unrelated (but maybe it's actually related). I've been trying to setup a local development environment for Kubernetes on mac. On mac, docker does not allow for connecting directly to the pods, you need to either setup a tunnel or service. The problem for my use case is that each pod could have a different port and local address and a load balancer does not make sense for what I'm building which requires connecting directly to a specific pod. Does Podman solve this problem? I think the problem is dockerd on mac. As of now, I just have a completely separate environment in the cloud that I run test on but it's very inefficient. I tried switching to nerdctl and containerd but the problem is that I have existing workflows that make use of docker_init files and nerdctl breaks those.

stonemetal12 3y ago
>docker does not allow for connecting directly to the pods, you need to either setup a tunnel or service That isn't docker, Kubernetes is designed to work that way. To be infinitely horizontally scalable, and automatically handle pods (and servers) going down, caring about which instance you are talking to is generally a bad thing.
- deleted 3y ago
  [deleted]
dingledork69 3y ago
Setting up a Kubernetes service is the way to go, though you could also use NodePort on the pods.
andrewmackrodt 3y ago
While this may not solve your problem, I use docker-network-connect which lets me connect directly to containers running in the 172.x.x.x range. By default, macOS does not support routing from host to containers by IP https://github.com/chipmk/docker-mac-net-connect https://github.com/chipmk/docker-mac-net-connect. In the kubernetes case (I am using k3d on my Mac) pods aren't directly routable but with metallb, load balancer IP addresses can be connected to directly and there's no worry about port conflicts as there might be with k3d's default servicelb implementation (this is my bootstrap script https://github.com/andrewmackrodt/k3d-boot https://github.com/andrewmackrodt/k3d-boot). If you need to connect to specific pods directly and it doesn't make sense to change your pod config, kubectl port-forward may suffice?

geerlingguy 3y ago

I'm excited to see this finally happen—acknowledgement that Docker Desktop has been an essential part of the process of onboarding devs (who often use the command line, but sparingly) into containerized development with a gentle on-ramp. The big question is whether Podman Desktop will be (a) stable and not a memory-hog, (b) make container workflows on Mac/Windows as simple (conceptually at least) as on Linux, and (c) be a sustainable effort for the community that's still extremely Red Hat-centric. To that last point, I still see very little adoption outside of the Red Hat ecosystem. It seems like `docker-ce` is still installed on most servers, `docker-compose` for lightweight app orchestration, and when people use Kubernetes, few people know or care what underlying container management daemon is running.

wronglebowski 3y ago
That’s the disconnect I also experience. Working with multiple different organizations they either . 1. Use Docker Compose and have no container strategy 2. Have a container team and an orchestration platform. Not many organizations operate in the middle ground, seems difficult to do well with little overhead.
- hotpotamus 3y ago
  I work on an operations team of about 2.5 people who handle everything for a small SaaS company and we're slowly containerizing. New systems are built and deployed in Docker and the legacy stuff is slowly getting there. We're using Swarm which I'm thinking is probably more like the middle ground.
  - lightbulbjim 3y ago
    Docker Swarm was the dream. A shame so many were dissuaded from using it due to the potential for support to be yanked out from underneath them.
Arcanum-XIII 3y ago
I can write docker-compose file, run it on my laptop. Can't do that without spending 2 days of pre study with K8s. And to have it ready on a basic laptop is not fun. At all But K8s is maybe not the tool for that either.

dang 3y ago

Related: Podman Desktop: Same functionality as Docker Desktop but open source - https://news.ycombinator.com/item?id=35296165 https://news.ycombinator.com/item?id=35296165 - March 2023 (36 comments) Podman Desktop: A Free OSS Alternative to Docker Desktop - https://news.ycombinator.com/item?id=33536978 https://news.ycombinator.com/item?id=33536978 - Nov 2022 (191 comments) Podman Desktop Companion GUI – Parity on All Major Operating Systems - https://news.ycombinator.com/item?id=31055475 https://news.ycombinator.com/item?id=31055475 - April 2022 (113 comments)

teleforce 3y ago

Earlier today I was browsing the Podman desktop website and pretty sure it was at 0.15 version, and then telling some people after that Podman desktop will probably reach stable sooner rather than later. However, does not expect it to be this very soon and it's now suddenly stable at version 1.01. Apparently container software and ecosystem do move at a blazing speed.

user3939382 3y ago

I'm waiting for Podman to hit AWS ECR/ECS. Until then it's just an interesting topic. https://github.com/aws/containers-roadmap/issues/626 https://github.com/aws/containers-roadmap/issues/626

paulddraper 3y ago
That would be simply amazing. I love Podman but sadly not enough to run my own servers :(
dmw_ng 3y ago
What value is added by swapping Docker out for an alternative on ECS? It's (at least as I understand it) basically an implementation detail, and well beneath the "covered by AWS support, don't touch" surface
- user3939382 3y ago
  You're right in a way, I really don't care what AWS does under the hood. The bigger issue is that I don't want any avoidable discrepancies between what I'm testing with on local and what I'm deploying. Obviously it's never 1:1 because my local isn't an AWS cloud infrastructure, but up til now the container engine isn't a variable.
  - acdha 3y ago
    I mean, that’s a worthy goal but it’s not necessary: discrepancies like that are uncommon and since there are many other potential differences between your desktop and the server environment you need to have a robust test suite in any case to make sure you aren’t accidentally over-coupling your code to your development system.
    - user3939382 3y ago
      > discrepancies like that are uncommon Are you saying differences between Podman and Docker are uncommon? My untested assumption is that they're not uncommon just given how new Podman is. Testing is nice but you don't want to have to wait for that to run to find issues that you could make immediately obvious without it.

kentrf 3y ago

I've been trying to get podman working with vscode and the docker extension for a while now... Only to find out yesterday I had to downgrade the extension due to differences between docker and podman.

anderspitman 3y ago

Docker Desktop provides some compelling options for lowering the barrier of entry for selfhosting. Today you can take a Windows laptop and run just about any Linux service, with pretty fast networking and host disk access. No CLI experience required. The only major missing piece is inbound networking from the internet. Tunneling[0] is my preferred solution to that problem. Or if you don't want to expose your services to the internet there's already a Tailscale extension[1]. It's exciting and important to have an open source alternative in this space. [0]: https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling [1]: https://tailscale.com/blog/docker/ https://tailscale.com/blog/docker/

BIackSwan 3y ago

I tried to use podman for a personal project. It still has lots of documentation issues/missing. Lots of little bugs and very little updates on stability. Used wsl2 and ubuntu. Eventually gave up because it was just leading from one rabbit hole to the next. Either use venv/vagrant/docker. Or just use native development workflow. Podman is not worth the pain unless its for a mid size business or bigger.

lostmsu 3y ago

Does it support GPU acceleration? On Windows?

sarahdellysse 3y ago

Anyone have any experience running Windows and WSL2 with Podman Desktop? I'm running W11, with fedora in WSL2. What I've been doing with Docker Desktop is running Docker Desktop on Windows startup, and that gives me access to the docker machine in both powershell and inside my wsl2 environment (for the latter, docker-desktop installs a binary inside fedora-wsl2 at `/usr/local/bin/docker` that communicates to the host) So far, I uninstalled Docker-Desktop and installed Podman-Desktop, and now I can run `podman` from powershell but not from fedora. I'm about to try `sudo dnf install podman` and hope it connects to the podman-machine? I dunno, it's not exactly clear

pxc 3y ago
> now I can run `podman` from powershell but not from fedora. I'm about to try `sudo dnf install podman` and hope it connects to the podman-machine? I dunno, it's not exactly clear One thing you could do is just symlink or wrap the Windows podman.exe as `podman` on your WSL guests, and rely on WSL interop at the CLI instead of sharing a socket. This is probably what Docker Desktop does, based on your description (I thought it (used to?) share(s) a socket from the dedicated WSL guest it creates to your other WSL guests). Alternatively, if you install Podman Desktop via Scoop and have WSL interop enabled for your guests (so that your Windows binaries appear on your Linux guests' PATHs), I think you'll get the same `podman` as your Windows PowerShell sessions access onto your WSL guests for free.
pid-1 3y ago
Docker Desktop: 1. In the past, created a managed WSL vm to run containers. 2. At some point, it included the option to use a WSL distro instead, but you had to tell it explicitly. 3. Nowadays it detects whether a default WSL distro is present and uses it to run containers automatically. Otherwise it creates a managed WSL distro just to run containers. As far as I understand, Podman Desktop still is at (1). You can't tell it to use your own WSL distro. > I'm about to try `sudo dnf install podman` and hope it connects to the podman-machine? I dunno, it's not exactly clear I think podman-machine is meant to be executed on the host, but worth a try anyway

Art9681 3y ago

Does the podman VM have Rosetta 2 acceleration or does it still use the slow qemu runtime on M series Macbooks? This is the main reason I switched to OrbStack which is a very promising alternative to all of this. Free for now but looks like they intend on making it a paid app in the future. The speed difference is significant.

paulddraper 3y ago
Ick. Doesn't it support AMD64?
m4r71n 3y ago
Podman still uses QEMU on Mac: https://podman.io/docs/installation#macos https://podman.io/docs/installation#macos
- ecnahc515 3y ago
  Qemu is the hypervisor in this situation. Which doesn't necessarily preclude having Rosetta acceleration of AMD64 binaries within the ARM64 Linux guest itself. That said, as far as I know, the only official way to use Rosetta inside a Linux guest is using Virtualization.Framework, which allows mounting a Rosetta binfmt handler via Virtiofs. So it's also going to use Qemu inside the VM to handle running amd64 images, not Rosetta.

lmz 3y ago

Podman (Desktop) on Windows ate all my RAM when I left it up for a few days. Somehow it leaked wsl.exe / podman.exe process handles every time it ran the "podman machine" commands it uses to keep track of its VM.

LightFog 3y ago

I’ve been using this on Mac for a few months now. It’s great to have an alternative to Docker desktop although it doesn’t feel fully there yet, on Mac at least. What is available in the UI is slick - but so many features are missing I often just end up back in the shell. Am experiencing a lot of strange behaviours in terminal sessions via the UI also, particularly hung sessions and it being way too easy to accidentally close the session by switching Ui tabs.

CraigJPerry 3y ago

Just for fun i thought i’d try to trip this up by hosting my podman containers on a remote x64 host: x64$ podman system service -t 0 & x64$ systemctl enable --now --user podman.socket Then telling podman on my m1 macbook air to use the remote machine rather than spinning up a podman machine locally on the m1: m1$ podman system connection add fedora --identity ~/.ssh/id_rsa --port 22 ssh://craig@s1.local/run/user/1000/podman/podman.sock m1$ podman system connection default fedora but it actually works just fine \o/ either way this is pretty but i’ll stick to the cli.

yrro 3y ago
Dumb question but after doing that how do you go back to telling podman to use your local machine?
- CraigJPerry 3y ago
  m1$ podman system connection list --all m1$ podman system connection default <chosen system from above command> On my macos if i install a podman machine for local vm, it’s called podman-machine-default

kplex 3y ago

Not sure I particularly trust Redhat after what they did to CentOS.

linsomniac 3y ago
Ok, I'll bite... What did RedHat do to CentOS?
- heywoodlh 3y ago
  I think this is in reference to RedHat prematurely ending support for CentOS 8 and basically abandoning its former model of being a slow-moving, stable RHEL clone[0] [0] https://www.phoronix.com/news/CentOS-8-Ending-For-Stream https://www.phoronix.com/news/CentOS-8-Ending-For-Stream
deleted 3y ago
[deleted]

yrro 3y ago

How does it work on Enterprise editions of Windows?