i genuinely run all my shit bare metal
This is why I don’t like Docker compared to Podman:
I literally yesterday dealt with that. There’s an option to just turn off Docker’s firewall manipulation so you can do it manually.
I had the same issue, but I just added my plain iptables rules to the DOCKER-USER table, which worked fine
Please elaborate…
I’m curious why you feel this way? I’m kinda the opposite — podman has features I use that Docker doesn’t.
Not the poster, but I kinda get this sentiment. For my laptop and things that I do for work, I prefer Podman. Better security posture out of the box, and I’m typically crafting my own pods to work a specific way.
But, if I am just trying to start up some app/service and I’m following the GitHub documentation with the project…I want to just copy and paste and there isn’t a 1-for-1 for
docker compose. Podman does have an alias package so you can saydockeron the cli, but the “compose” part of it is not as good if I just want something to run without dicking with it.So in short, if I’m making something with a container or want to have hands on control, I prefer Podman. If I’m running something “off the shelf”, like just running someone’s docker compose files files from their Github, I’m just running Docker man.
There’s a built in tool to rake docker compose files, and make quqdlets that worked just fine for me?
Atleast Podman is faster + does not require a centralised daemon
It doesn’t and I’m sure there are benefits, but for basic home services daemonless translated directly into more work for no benefit.
All my homies use nerdctl anyway.
Container manager in Synology. Why?
It’s why I just ran portainer instead
docker/podman sucks, u can’t avoid using journald for logging. U also can’t avoid using overlayfs. Plain LXC is what I have at home
Docker became a license nest despite actual devs using k8s like a normal person should.
Meanwhile podman gave us rootless containers, CDI, and quadlets which far outweighs whatever docker is limping to the barn with.
This! Podman rootless quadlets is so powerful and beautifully simple. Just look at that faaar superior security model and hos it doesnt even need a service to manage services because it just integrates natively with systemd I replaced my entire container layer from Rocker Swarm way back with K8s. Then it dawned on me I dont want the pods to move to another node by themselves anyway and then I just moved to Podman quadlets managed Ansible. Oh, and the podman pods are awesome as well.
Switching colleagues over to Pdman desktop, whenever legal asks about licenses for DD. :)
Podman has some thngs rhat I don’t like but it ften works much better, and a lot f really great tools use it natively (like distrobox)
Is your keyboard ok?
podman is great.
Only gripe:
~ $ pomdan ps No command pomdan found, did you mean: ...I know, alias it, but man, I don’t wanna.
Pomdan won’t work on my system because that is my alias to send Dan a message that I would like some more Pom.
I mean, that definitely seems like a you problem.
I just use the native docker apps that truenas has preconfigured. The one time I needed a custom compose container I just bashed my face against the keyboard until it worked. This is how I feel about all containerization. There really should be an easier system. Nothing wrong with higher accessibility.
Am I the only one who struggles with podman permissions? Every time I try to use it one service or another doesn’t work.
I tried for immich (only service I expose) and failed.
Linkwarden would not run without root.
I just use rootless docker, it’s way less hassle.
God I hate arguing with podman. Something doesn’t work and I can’t tell if it’s my quadlet or the app
What’s podman?
not much man how about you
It’s a daemonless client for managing Linux containers. So any “docker” container. Most Linux distros have a native package for it too
This meme taught me a lot with all these comments. Thank you
Podman is a better choice.
What’s the benefit over Docker?
Rootless, better integrated with system, a bit faster and lighter on resources. Also it supports k8s style yaml configuration both ways and a lot of people are more familiar with them and they also provide some (minimal) interoperability.
a bit faster and lighter on resources.
Can’t confirm. I have two VMs with an identical image (about 200 MB).
Docker: Pulling the image takes about 10 seconds and needs about 200 MB diskspace.
Podman: Pulling the image takes about 15 minutes and needs about 110 GB diskspace.
Docker: Commands like “docker ps”, “docker stop” etc. run in a few seconds.
Podman: Commands like “podman ps”, “podman stop” etc. take at least one minute.
Something is super wrong in your setup or some weird Podman bug on your side. Works flawlessly and quickly on my machine, no such issues.
And on most people’s machines too. So, this must either be an exotic Podman bug, or something not right with your setup. Not many options there, but I hope you’ll find out what’s wrong.
I’m not op. I just like to use the meme when I see the meme.
How exactly is it using four orders of magnitude more space? Did you look what the files?
Company confirmed that it is lighter and faster with multiple benchmark at the time of migration. Your case sounds like extreme misconfiguration.
extreme misconfiguration
I did not configure anything, I just installed it from the debian repository.
If this is on Debian 12 I think the issue is that the default storage backend is VFS rather than Overlay, which burnt me as well as it is REALLY inefficient. Look up how to find out what you’re using and change it if that’s it. After doing that it’s been really good for me :)
deleted by creator
Not requiring a service running in root context.
While I’ve never used it myself, Docker Rootless mode seems to also allow this?
It isn’t that easy to setup. Podman just works
10 years too late.
At work, avoiding surprise licensing fees. If you ever have over 250 employees or over 10 million revenue, you owe a subscription.
At the home, easy orchestration with systemd
Isn’t that only for docker desktop?
Yes. Rancher desktop exists, btw. Just an fyi.
Edit: An open source alternative to Docker Desktop. It has most of the same features. Occasionally I’ve run into something that doesn’t work, but for the most part it’s just peachy.
It is! If you want to reduce exposure to this you really have to make sure mdm disallows installing it. The numbers trigger regardless of seats, and then you’re on the hook for the licenses for every employee using it.
So even if as a matter of policy you don’t use docker desktop, it’s possible engineers still do.
if you’re asking with regards to systemd orchestration, no. i love deploying containers as Ansible -> systemd -> podman.
No, they mean the license costs. I’m pretty sure, you only have to pay a fee for Docker Desktop…
my bad
