• 0 Posts
  • 16 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle




  • Once podman is installed (iirc the network package is marked as a dependency for most package managers) and your user is configured (provide subuids/subguids), I really think podman is a simpler model. The containers you run are actually yours (not root’s) and you don’t need to be part of a privileged docker group to run them. Of course, you can run containers as root with podman too: just use sudo.

    You’ll actually need to configure your user the same way for running docker in rootless mode, which should be the default.

    Your dockerfile will work with podman. Your docker-compose file will too (via podman compose). You’ll have access to awesome new capabilities like pods, and defining your containers with kubernetes style yaml, and running your containers via systemd.

    However, with rootless podman/docker, you should remove any/all of the USER silliness the rootful/default docker people do to protect themselves a bit from rogue processes effectively running as root and/or container escapes to root.












  • That’s certainly part of the motivation (see the 4th paragraph).

    Yes, image based. No, not Bazzite specifically, but silverblue (and kinoite) under the fedora banner directly.

    But that’s not really the point of the article. In order for those to go mainstream, flatpak and especially flathub have a lot of maturing to do first, and the author lays out a pretty good roadmap with thorough explanations.