4 ms·

I almost never see what is IMHO the killer feature of Podman touted as a reason to prefer it over Docker: Docker mangles your network config. It is a nightmar

I almost never see what is IMHO the killer feature of Podman touted as a reason to prefer it over Docker: Docker mangles your network config. It is a nightmare trying to run Docker and KVM virtual machines with bridges at the same time. Podman on the other hand plays very nice OOTB. I've also had a lot of VPNs break and/or be broken by Docker. I don't know much about the way podman does networking, but whatever it is they did a good job thinking it through and it has yet to interfere with anything else I do. I definitely can't say the same for Docker

zamalek 3y ago
Buildah (which may well work with Docker, but is a Podman peer) is the killer feature in my opinion. Dockerfiles are unadulterated shite. One of my pet peeves is "bored developers" writing DSLs/programming languages (especially in YAML, but that isn't the case here) when an off-the-shelf language would have done. Dockerfiles are a genuinely fantastic example of why this nonsense needs to end. To see why, look at Buildah without `bud`. Instead of a silly DSL that becomes annoying the second your use-case veers an inch off the happy path, you can use Bash, or Fish, or whatever it is that you want. These types of bad decisions carry the into the rest of the Docker ecosystem. DCS and it's (perpetually incomplete) replacement are yet more examples: instead of using established signing protocols (like Cosign does) they had the desire to build an obnoxiously complex and hard to automate (especially key rotation) system.
tahnyall 3y ago
> It is a nightmare trying to run Docker and KVM virtual machines with bridges at the same time. I'm doing it right now, no nightmares, just works, odd.
- freedomben 3y ago
  Are you bridging to the main eth interface on the host? (not just a KVM private bridge). Can you share your KVM configs?
nashashmi 3y ago
Podman is free. Docker is also free, but a pain to install docker without docker desktop.
- mrAssHat 3y ago
  No pain at all.

zamalek 3y ago

Buildah (which may well work with Docker, but is a Podman peer) is the killer feature in my opinion. Dockerfiles are unadulterated shite. One of my pet peeves is "bored developers" writing DSLs/programming languages (especially in YAML, but that isn't the case here) when an off-the-shelf language would have done. Dockerfiles are a genuinely fantastic example of why this nonsense needs to end. To see why, look at Buildah without `bud`. Instead of a silly DSL that becomes annoying the second your use-case veers an inch off the happy path, you can use Bash, or Fish, or whatever it is that you want. These types of bad decisions carry the into the rest of the Docker ecosystem. DCS and it's (perpetually incomplete) replacement are yet more examples: instead of using established signing protocols (like Cosign does) they had the desire to build an obnoxiously complex and hard to automate (especially key rotation) system.

tahnyall 3y ago

> It is a nightmare trying to run Docker and KVM virtual machines with bridges at the same time. I'm doing it right now, no nightmares, just works, odd.

freedomben 3y ago
Are you bridging to the main eth interface on the host? (not just a KVM private bridge). Can you share your KVM configs?

nashashmi 3y ago

Podman is free. Docker is also free, but a pain to install docker without docker desktop.

mrAssHat 3y ago
No pain at all.