Podman

“Podman had some issues with WSL 3 that they're still releasing fixes for, but it's all working with that too.”

“It is far more secure by design (rootless) and is unable to silently alter the firewall's configuration.”

“The ideal setup is rootless Podman and having all your containers not even be able to create root-owned files.”

“the biggest advantage of podman is that it uses pods with basically the same config and behavior as kubernetes does”

“The easiest way to do this is by using system-level Podman Quadlets that run as an unprivileged user account.”

“This allows rootful Podman to orchestrate privileged capabilities while running the container processes in an unprivileged namespace.”

“Podman now follows the UAPI Configuration Files Specification as well as the Base Directory Specification. This is great!”

“podman supports it natively and you can actually wrap your app containers into a single "pod" for easier management”

“Podman has supported plugin compose (v2) for years now, and I believe that's the version I used before I switched to Quadlets”

“Rootless Podman forces you to think about permissions and does not stab you in the back by overwriting your firewall rules.”

“It was worthwhile as I can just use my usual systemctl and journalctl utilities for both containerized and non-containerized services”

“Podman requires a bit of extra work to implement well and that is just enough of an annoyance to tip the scales towards Docker.”

“I think Podman is better in a number of ways, but it isn’t the most intuitive to implement compared to Docker.”

“We have a consistent wsl image for everyone. So they are all on Linux. Then we have a podman pod defined in a bash script.”

“Podmans solution is to not commit to compose, but instead to create a bespoke mechanism involving a bunch of tiny files”

“It put me off Podman for years. I do now think it has some clever ideas and if you're running RHEL it's a no brainer”

“I use podman regularly, and despite it being a good drop-in replacement like 95% of the time, the 5% of the time where it isn't seamless are super painful”

“It’s the setting up systemd unit files and local user accounts for rootless / daemonless deployment of containerized apps that can be a headache.”

“They put rootless as a forefront before it was ready and still no proper support for Ubuntu on v4 of Podman.”

“I have found this to be perennially true. I am willing to doggedly pursue the root cause and file bugs, but for many people it will just seem broken.”

“most of the fixes for Podman/Docker incompatibilities is just addressing that assumption with a few extra flags”

“If you're using docker-compose.yml on a team that mostly uses docker, you can't use use that same docker-compose.yml with rootless podman.”

“Rootless was the reason I switched to Podman years ago. It's just so smooth and I don't have to worry about obscure permissions and services errors anymore.”

“Highly recommend Podman overall; there are some quirky edge cases, but for the most part it's a smooth replacement for Docker.”

“Podman comes with no socket and rootless by default, it just seems more in line with this sort of architecture”

“the exploit failed. I am not sure if the default container runtime in Podman is resistant against these attacks”

“activate Podman's Docker API compatibility socket, and simply set your DOCKER_HOST env var to that socket”

“if you already know how to use docker/podman and just want to get something working in an evening, this works too”

“I've been experimenting with the immutable fedora-bootc images and podman+Containerfiles, which works pretty well for this.”

“Podman is a viable option. I'm not sure how it works but I was able to run Alpine and Debian containers by setting a few system flags.”

“Luckily Podman seems to support FreeBSD these days for docker images, but the Linux emualation might be a bit of a blocker”

“podman quadlet doesn't seem to support running at a "system level" as a non-root user, at least according to their docs”

“Podman is a different product that is pretty much a drop-in replacement for Docker but lets you run as non-root.”

“It provides similar functionality as docker-compose, using a yaml file which is a subset of the Kubernetes pod definition syntax.”

“of course I don't mount my entire harddrive to the container when it's running, that would defeat the entire purpose.”

“Easiest for now is just run everything in rootless podman containers (or similar), which is relatively easy.”

“Podman already supports PTYs that can be attached/detached, allows isolating different processes, and has an HTTP API.”

“podman is not a drop-in replacement for Docker. You can replace it with podman but expect to encounter minor inconsistencies and some major differences”

“Instead, activate Podman's Docker API compatibility socket, and simply set your DOCKER_HOST env var to that”

“The CI/CD pipeline triggers a podman auto-update command, and just like that all containers are running the latest version.”