3 ms·
After Docker Desktop randomly started consuming insane amounts of memory again we switched to Podman and it was literally as easy as installing it and pointing
by cdmckay 3mo ago
After Docker Desktop randomly started consuming insane amounts of memory again we switched to Podman and it was literally as easy as installing it and pointing it at our docker-compose.yml.
Zero changes needed and now I don’t need to keep a daemon running.
Great software.
- chrisweekly 3mo agoI liked Orbstack better than colima which was better than Docker Desktop. Then I found https://smolmachines.com's https://smolmachines.com's smolvm microvms.
- zuzululu 3mo agobeen using orbstack but this smol stuff is interesting is this firecracker or total rewrite
- binsquare 3mo agoauthor of smol machines here, it has no relation to firecracker. It runs ontop of the libkrun vmm forked with optimizations, which is the underlying lib powering podman as well. open source, will contribute upstream when possible: https://github.com/smol-machines/libkrun https://github.com/smol-machines/libkrun
- glenjamin 3mo agoUpthread the implication seems to be that smolmachines would be in some way a replacement for orbstack to run docker containers But it seems more like a completely different way to run isolated workloads?
- binsquare 3mo agosmol machines is a virtual machine, akin to firecracker but designed to run locally as well It also has container-inages support built-in with crun so you can create a VM with a container running by default. You can also just... run docker inside of it.
- zuzululu 3mo agogood stuff man i just installed it and its super fast im just not sure is this really secure to run untrusted code i can't find any white papers
- binsquare 3mo agothe underlying vmm is libkrun: https://github.com/libkrun/libkrun https://github.com/libkrun/libkrun is battle tested and used for podman. It provides kernel isolation for running untrusted code which is a security boundary that traditional containers can't guarantee. I'm engaged with a third party security penetration company for their review, and will be happy to share it publicly when it is available.
- zuzululu 3mo agothank you. definitely enjoying smol. this is a very nice alternative to docker, orbstack even firecracker
- LeBit 3mo agoCan smolmachines run devcontainers? K3d?
- binsquare 3mo agoyes to both, here's the example for running docker(indirectly, devcontainers) inside smolvm: https://github.com/smol-machines/smolvm/blob/main/examples/docker-in-vm/docker.smolfile https://github.com/smol-machines/smolvm/blob/main/examples/d...
- LeBit 3mo agoThis is very cool. The example is thorough and well documented. I am trying smolmachines this weekend. Thanks.
- trymas 3mo agoFixed link: https://smolmachines.com/ https://smolmachines.com/
- chrisweekly 3mo agothanks!
- meszmate 3mo agoSince I came across orbstack that's the only one I use for docker on macOS
- bmurphy1976 3mo agoIt's been a couple months so I forget what problems I ran into, but Docker's AI bullshit pushed me over the edge and I tried switching to Podman. I ran into some compatibility issues. Alas I don't recall the details. So I tried Rancher Desktop and other than I keep forgetting its name it just worked. It's another simple option for those who need it.
- geek_at 3mo agodon't forget `alias docker='podman'` for muscle memory
- deleted 3mo ago[deleted]