4 ms·

This; Podman is what Docker should have been, for me. Security first, no daemon, more Linux-like behavior (You can manage them with SystemD unit files if you w

This; Podman is what Docker should have been, for me. Security first, no daemon, more Linux-like behavior (You can manage them with SystemD unit files if you wish) and it supports the same, usual container images you build/use with Docker. The main part it was lacking is the compose equivalent, but that too is coming along.

XorNot 3y ago
Honestly with quadlet it might be there on the compose front: being able to deploy either as systemd-like files or as Kubernetes manifests probably solves the entire problem in a very nice way (the K8S compatibility is the real magic IMO since it's the defacto cloud ecosystem).
- alias_neo 3y ago
  I haven't played with any of Podman's Kubernetes YAML stuff yet, but we target Kubernetes. Does it support higher-level declarations like Deployments and StatefulSets? I'm trying to understand how/if we could use this without having to write new manifests. A (very) quick search didn't clarify it for me.
  - goku12 3y ago
    Quadlets just create a systemd unit file to launch containers with podman and have systemd manage its lifetime. Since systemd lacks the ability of controllers like Deployment and StatefulSets, I doubt that quadlets are able to achieve much more.
    - eliaspro 3y ago
      I'm pretty sure, that cleverly combining various unit types and their capabilities/attributes would allow to cover 90% of what's needed to emulate Deployments and StatefulSets.
      - goku12 3y ago
        Yes. That's what I assume too.
Rapzid 3y ago
Is it coming along? Last I saw they were moving away from the compose Schema to a k8s manifest and... Those are absolutely disgusting.
timost 3y ago
You can use docker-compose with podman using podman's docker compatibility API. See my other comment in a recent thread [0] [0] : https://news.ycombinator.com/item?id=37661056 https://news.ycombinator.com/item?id=37661056
nine_k 3y ago
(It's fun to note how systemd was an epitome of in-Linux-like software 7-8 years ago, and now it's the opposite. I'm not talking about systemd merits here, just about the change in perception.)
- xorcist 3y ago
  Comparably little harsh criticism has been made for systemd the init system, most has concerned systemd-the-almost-ntp-client and systemd-the-binary-logfile, the various related xml documents, things like that.
Fire-Dragon-DoL 3y ago
From my understanding, it has serious limitations, for example since it's rootless, it can't bind on port 443

XorNot 3y ago

Honestly with quadlet it might be there on the compose front: being able to deploy either as systemd-like files or as Kubernetes manifests probably solves the entire problem in a very nice way (the K8S compatibility is the real magic IMO since it's the defacto cloud ecosystem).

alias_neo 3y ago
I haven't played with any of Podman's Kubernetes YAML stuff yet, but we target Kubernetes. Does it support higher-level declarations like Deployments and StatefulSets? I'm trying to understand how/if we could use this without having to write new manifests. A (very) quick search didn't clarify it for me.
- goku12 3y ago
  Quadlets just create a systemd unit file to launch containers with podman and have systemd manage its lifetime. Since systemd lacks the ability of controllers like Deployment and StatefulSets, I doubt that quadlets are able to achieve much more.
  - eliaspro 3y ago
    I'm pretty sure, that cleverly combining various unit types and their capabilities/attributes would allow to cover 90% of what's needed to emulate Deployments and StatefulSets.
    - goku12 3y ago
      Yes. That's what I assume too.

Rapzid 3y ago

Is it coming along? Last I saw they were moving away from the compose Schema to a k8s manifest and... Those are absolutely disgusting.

timost 3y ago

You can use docker-compose with podman using podman's docker compatibility API. See my other comment in a recent thread [0] [0] : https://news.ycombinator.com/item?id=37661056 https://news.ycombinator.com/item?id=37661056

nine_k 3y ago

(It's fun to note how systemd was an epitome of in-Linux-like software 7-8 years ago, and now it's the opposite. I'm not talking about systemd merits here, just about the change in perception.)

xorcist 3y ago
Comparably little harsh criticism has been made for systemd the init system, most has concerned systemd-the-almost-ntp-client and systemd-the-binary-logfile, the various related xml documents, things like that.

Fire-Dragon-DoL 3y ago

From my understanding, it has serious limitations, for example since it's rootless, it can't bind on port 443