Docker

What hackers pick instead

• KubernetesRecommended as a standard, portable way to deploy and scale containers across many machines, backed by a huge ecosystem, though critics call it complex and overkill for small setups.333recommend
• Docker ComposeDefines a whole multi-container app in one declarative YAML file, making local dev and single-server deployments quick and repeatable; critics find it awkward for production, rootless and multi-host setups.149recommend
• UncloudDeploys containers across several machines with Docker Compose-like simplicity and no Kubernetes control plane. Main caveat: the curl-to-bash install runs as root.33recommend
• Podman QuadletsRuns Podman containers as native systemd services, so they start, log and restart like other system services, though docs are thin and errors can be hidden in journald.30recommend
• podman-composeFree, single-file Python tool that runs Compose-style files on Podman and integrates with systemd; critics say it is not a full drop-in replacement for docker compose.8recommend

Every quote

The 40 most detailed of 1365 comments. Each links to the original.

1. Sure Linux, Docker, Kubernetes, Postgres, and all the other standard tools in the box are open source and free, but they're also arcane and complex to run

   Mixed · Jul 2026 · in “American AI is locked down and proprietary. It's losing”

2. Using pixi + docker + dokku for my data processing projects lets me push an identical environment to a cloud instance with basically no devops overhead.

   Recommends · Nov 2025

3. Docker makes for great packaging. But containerizing ever step of the build process or even just doing it in one big container is a bit extra.

   Mixed · Dec 2025 · in “Building small Docker images faster”

4. Working on multiple projects, over a longer period of time, with different people, is so much easier when setup is just 'docker compose up -d'

   Recommends · Jan 2026 · in “Command-line Tools can be 235x Faster than your Hadoop Cluster (2014)”

5. Rootless Docker reduces one class of risk, but it’s important not to mistake a smaller privilege boundary for a complete security boundary.

   Mixed · Aug 2026 · in “Rootless Docker and Its Hidden Security Trade-Offs”

6. At the very least, run it in Docker. It's not a security tool, but it's at least some kind of guardrail against data loss and exfiltration.

   Recommends · Apr 2026 · in “I have officially retired from Emacs”

7. all server software that I wanted to run was provided in Docker docker containers and with docker compose examples, so it was just easier

   Mixed · Mar 2026 · in “I Love FreeBSD”

8. I would always prefer the latter but would love to know what your approach to security is that's better than running npm inside Docker.

   Recommends · Apr 2026 · in “Mercor Hit by Cyberattack”

9. Created the open source project that almost single-handely revolutionized deployments, development environments, and cloud computing

   Mixed · Feb 2026 · in “Red Hat takes on Docker Desktop with its enterprise Podman Desktop build”

10. Should you learn - yes. I use it always to set up my dev environment so that the team can have a consistent environment to work on.

    Recommends · Jan 2026 · in “Ask HN: Should I learn Docker to deploy my app in VPS?”

11. It's a security boundary, sure, but it's not as battle-tested as the isolation of not being root, or the isolation between VMs.

    Mixed · Dec 2025 · in “I got hacked: My Hetzner server started mining Monero”

12. It is like 4 lines of config for Postgres, the only line you need to change is on which path Postgres should store the data.

    Recommends · Apr 2026 · in “I Am Building a Cloud”

13. I use Docker on Linux for this kind of thing (Jellyfin, Nextcloud and a few others) and updates are completely trouble free.

    Recommends · Nov 2025 · in “Using FreeBSD to make self-hosting fun again”

14. I am a huge Docker fan! I would reiterate what several commenters have said already that it had a huge impact on my career.

    Recommends · Oct 2026 · in “Docker is weird”

15. It's a fine one, as long as you don't disable the boundary, which is as easy as running a container with --privileged.

    Recommends · Dec 2025 · in “I got hacked: My Hetzner server started mining Monero”

16. It's used because it combines the entire environment so I know the app runs the same locally as it does when deployed

    Recommends · Sep 2026 · in “I built the fastest PHP webserver in the world”

17. I would probably always reach for a docker container if I want a sandboxed command that can run identically anywhere

    Recommends · Apr 2026 · in “Show HN: Zerobox – Sandbox any command with file and network restrictions”

18. The difference is that you can move that whole bunch of interlinked containers to another machine and it will work.

    Recommends · Dec 2025 · in “Toro: Deploy Applications as Unikernels”

19. The containers became too large. And I had to write too long arguments for volume mounts and environment variables.

    Mixed · Oct 2026 · in “I paid people to try and follow my README”

20. The magic of the Dockerfile is that it puts the onus of spelling out the environment dependencies on the maintainer

    Recommends · Oct 2026 · in “Docker is weird”

21. I stuck it in a docker container with pass-thru to my repo directory and I feel pretty safe about letting it fly.

    Recommends · Jan 2026 · in “Running Claude Code dangerously (safely)”

22. So instead of an ansible playbook/role that installs, say, nginx from the distro package repository, and then pushes some specific configuration, I have a dockerfile that does the same thing? Woohoo?

    Criticizes · Nov 2025 · in “Kubernetes Ingress Nginx is retiring”

23. The moment you start pulling random dockerfiles from random sources, you'll be wasting colossal amounts of resources compared to just installing packages on your host OS

    Criticizes · Apr 2026 · in “DRAM pricing is killing the hobbyist SBC market”

24. people find out testcontainers or whatever is pulling from docker hub rather than the company registry only when their CI build fails from rate limits

    Criticizes · May 2026 · in “'No Way to Prevent This,' Says Only Package Manager Where This Regularly Happens”

25. Docker is not a security boundary. It never has been, but given recent demonstrations of container escapes its even less of one than it ever was.

    Criticizes · Jun 2026 · in “The ways we contain Claude across products”

26. taking glaring security holes in a single app (docker) & transforming them into glaring security holes in an entire OS is generally not desirable

    Criticizes · Aug 2026 · in “Omarchy: Any User Process Can Escalate to Root”

27. The problem is that layers are really — in the end — sequential, and even a simple change in an earlier one invalidates the latter cached layers.

    Criticizes · Apr 2026 · in “I Am Building a Cloud”

28. I did docker pull a few times base on some webpost (looks reasonable) and detect app/scripts from inside the docker connect to some .ru sites

    Criticizes · Dec 2025 · in “I got hacked: My Hetzner server started mining Monero”

29. docker mounts act as a bypass for the file system restrictions, plus docker processes started outside the sandbox allow network proxy escape

    Criticizes · Aug 2026 · in “Docker Sandboxes – Disposable, isolated sandboxes for AI agents”

30. when something is shipped as 5 different docker containers it is MUCH harder to extract it into something you can run without docker

    Criticizes · Oct 2026 · in “What I self-host”

31. The fact that there's a backdoor to getting root access on the machine would be a problem even if you weren't running LLMs on it.

    Criticizes · May 2026 · in “Codex just found a "workaround" of not having sudo on my PC”

32. I've run some pretty gnarly full stack apps, some that included Java backends that needed up to 8gb because reasons, without issue as long as I built an ARM image.

    Recommends · Apr 2026 · in “Phone is about to stop being yours”

33. You're missing image distribution, namespaces (networking, pids, mount, users), seccomp (to limit root powers), cgroups (to limit cpu and memory usage)

    Recommends · Jan 2026 · in “What Has Docker Become?”

34. On the exact same box running Windows I was able to have VS Code, Chrome with 15+ tabs, terminals, docker, etc. all running with zero issues.

    Mixed · Aug 2026 · in “Linux 7.3 improves performance when running out of vRAM”

35. They wrote a really nice wrapper around cgroups/ns/tarball hosting and then struggled to monetize it because a large portion of their users

    Mixed · Jan 2026 · in “What Has Docker Become?”

36. Docker's client/server design also allowed for things like Docker Desktop, which made the integration seamless with non-linux systems.

    Recommends · Feb 2026 · in “Back to FreeBSD: Part 1”

37. Given the wealth and productivity creation that they're responsible for enabling across the industry, they deserve to be paid for it.

    Recommends · Dec 2025 · in “A Safer Container Ecosystem with Docker: Free Docker Hardened Images”

38. I'd still rather use docker. I don't mind that the daemon runs as root because there are some things that you need root for anyways!

    Recommends · Jul 2026 · in “Securing Services with Rootless Containers”

39. Then why not use _them_ to define your build pipelines? Bonus points: you can run them locally without tearing out your hair.

    Recommends · Aug 2026 · in “Bye, Bye GitHub”

40. deno, workerd and maybe a vm/docker solution with an webdav proxy mount and web-proxy are the only environments i am aware of

    Mixed · Apr 2026 · in “NanoClaw's Architecture Is a Masterclass in Doing Less”