> why would I use containers for base services? This is a supported feature of podman which can generate systemd units to make system services. But, as for ad

> why would I use containers for base services? This is a supported feature of podman which can generate systemd units to make system services. But, as for advantages (system has some of them too), sandboxing, resource constraints, ease of distribution, not being broken by system updates (glibc update on RHEL broke some Go binaries iirc). My rule of thumb is that only system software (e.g. DE, firewall, drivers, etc) belong on the base system, everything else is going in a container. This is very easy to do now on modern Linux distros.