4 ms·

This affects podman too.

• jsheard 11mo ago
  Not if you run it in rootless mode, which is more of a first class citizen in Podman compared to Docker.
  • 3np 11mo ago
    > Not if you run it in rootless mode. Same as for docker, yes? https://docs.docker.com/engine/security/rootless/ https://docs.docker.com/engine/security/rootless/
    • exceptione 11mo ago
      nope. You should look at https://docs.docker.com/engine/network/ https://docs.docker.com/engine/network/ Networking is just better in podman.
      • joshuaissac 11mo ago
        > nope. You should look at https://docs.docker.com/engine/network/ https://docs.docker.com/engine/network/ That page does not address rootless Docker, which can be installed (not just run) without root, so it would not have the ability to clobber firewall rules.
    • wasmitnetzen 11mo ago
      Rootless exists in Docker, yes, but as OP said, it's not first-class. The setup process is clunky, things break more often. In podman it just works, and podman is leading with features like quadlets, which make docker services just services like any other.
      • newsoftheday 11mo ago
        No one wants, nor asked for, quadlets.