5 ms·

Why podman and not Docker?

by ashirviskas 1y ago

jrks11o 1y ago
docker desktop licensing changes in 2021
paulryanrogers 1y ago
It's free? Can run rootless?
- Vilian 1y ago
  Better integration with systemd
  - deleted 1y ago
    [deleted]
  - TacticalCoder 1y ago
    That's funny. To me one of the whole point of containers is that it's not systemd that's PID1. Combine that with a distro like Talos, an immutable Linux distro that contains less than ten executables and where none of them is systemd and... At long last containers and stuff like Talos show a path leading to, in a not-so-distant future, a world where we can be systemd and [ini]/microsoft config files (from a microsoft employee btw) free again.
    - AceJohnny2 1y ago
      It's not about running systemd in the container (practically nothing does that, though I myself considered it for a multi-user ssh shell system), but making containers manageable under systemd alongside other units.
2OEH8eoCRo0 1y ago
Docker took too long to support cgroups v2
seemaze 1y ago
It supports Kubernetes *.yaml manifests?
- hdjrudni 1y ago
  Is that a question or a statement? I'm running Kubernetes on Docker Desktop. But every few months Docker Desktop either outright craps out and forces me to wipe everything and rebuild my containers or the latest annoyance is that it keeps giving me popups saying something something couldn't start Ubuntu.... but then seems to work perfectly fine after skipping it 10 times.
  - nozzlegear 1y ago
    Podman directly supports kubernetes manifest files without running a kubernetes instance. You can do: podman kube play --replace k8s.yaml podman kube down k8s.yaml podman kube apply --namespace project -f k8s.yaml I'm not familiar with Docker Desktop so maybe that just works there too.
cowmix 1y ago
On Snapdragon / ARM Windows, it is the only game in town -- and it works great too!
scuff3d 1y ago
It comes preinstalled on RHEL8 and I can't be bothered to swap them.
foresto 1y ago
I run rootless containers on a low-power system. With Docker, I found rootless setup to be a PITA, despite having experience with unprivileged LXC containers. The manager daemon constantly consumed system resources even when no containers were running. Docker upgrades sometimes refused to run my containers until I chased down whatever storage driver problem they introduced in the latest version. When the most recent upgrade broke my containers yet again, I decided to give Podman a try. Setup was a breeze. There is no management daemon wasting resources. My containers just worked. Even the little cron script I wrote to query Docker for pending image updates just worked with Podman tools. I think Podman also makes it easy to map host uids to non-root container uids, which ought to help me reduce attack surface. (I haven't actually tried this feature yet.) Last time I checked, Docker did not. So far, I couldn't be happier.
- bootsmann 1y ago
  > Even the little cron script I wrote to query Docker for pending image updates just worked with Podman tools Podman comes with an auto-update flag you can set for containers that uses systemd to do this for you. Takes a bit of reading to get it right but its smooth sailing mostly.
  - foresto 1y ago
    Good to know, but my script is for a different workflow: It checks for updates to remote dependencies of my running custom containers. (For example, when alpine:latest points to something new.) It then prints a message for cron to email to me, noting that it's time to rebuild my custom stuff.
aragilar 1y ago
It's got a more modern design while having a drop-in CLI interface to docker (and also if needed a near-drop-in replacement for the docker socket API). This makes it the preferred backend for tools like distrobox.

Why podman and not Docker?

jrks11o 1y ago

docker desktop licensing changes in 2021

paulryanrogers 1y ago

It's free? Can run rootless?

Vilian 1y ago
Better integration with systemd
- deleted 1y ago
  [deleted]
- TacticalCoder 1y ago
  That's funny. To me one of the whole point of containers is that it's not systemd that's PID1. Combine that with a distro like Talos, an immutable Linux distro that contains less than ten executables and where none of them is systemd and... At long last containers and stuff like Talos show a path leading to, in a not-so-distant future, a world where we can be systemd and [ini]/microsoft config files (from a microsoft employee btw) free again.
  - AceJohnny2 1y ago
    It's not about running systemd in the container (practically nothing does that, though I myself considered it for a multi-user ssh shell system), but making containers manageable under systemd alongside other units.

2OEH8eoCRo0 1y ago

Docker took too long to support cgroups v2

seemaze 1y ago

It supports Kubernetes *.yaml manifests?

hdjrudni 1y ago
Is that a question or a statement? I'm running Kubernetes on Docker Desktop. But every few months Docker Desktop either outright craps out and forces me to wipe everything and rebuild my containers or the latest annoyance is that it keeps giving me popups saying something something couldn't start Ubuntu.... but then seems to work perfectly fine after skipping it 10 times.
- nozzlegear 1y ago
  Podman directly supports kubernetes manifest files without running a kubernetes instance. You can do: podman kube play --replace k8s.yaml podman kube down k8s.yaml podman kube apply --namespace project -f k8s.yaml I'm not familiar with Docker Desktop so maybe that just works there too.

cowmix 1y ago

On Snapdragon / ARM Windows, it is the only game in town -- and it works great too!

scuff3d 1y ago

It comes preinstalled on RHEL8 and I can't be bothered to swap them.

foresto 1y ago

I run rootless containers on a low-power system. With Docker, I found rootless setup to be a PITA, despite having experience with unprivileged LXC containers. The manager daemon constantly consumed system resources even when no containers were running. Docker upgrades sometimes refused to run my containers until I chased down whatever storage driver problem they introduced in the latest version. When the most recent upgrade broke my containers yet again, I decided to give Podman a try. Setup was a breeze. There is no management daemon wasting resources. My containers just worked. Even the little cron script I wrote to query Docker for pending image updates just worked with Podman tools. I think Podman also makes it easy to map host uids to non-root container uids, which ought to help me reduce attack surface. (I haven't actually tried this feature yet.) Last time I checked, Docker did not. So far, I couldn't be happier.

bootsmann 1y ago
> Even the little cron script I wrote to query Docker for pending image updates just worked with Podman tools Podman comes with an auto-update flag you can set for containers that uses systemd to do this for you. Takes a bit of reading to get it right but its smooth sailing mostly.
- foresto 1y ago
  Good to know, but my script is for a different workflow: It checks for updates to remote dependencies of my running custom containers. (For example, when alpine:latest points to something new.) It then prints a message for cron to email to me, noting that it's time to rebuild my custom stuff.

aragilar 1y ago

It's got a more modern design while having a drop-in CLI interface to docker (and also if needed a near-drop-in replacement for the docker socket API). This makes it the preferred backend for tools like distrobox.