Live data from Hacker News

I ditched Docker for Podman

codesmash.dev

381–390 of 670 posts

Re: I ditched Docker for Podman

#381
post #21

To provide 1 contrary opinion to all the others saying they have a problem: Podman rocks for me! I find docker hard to use and full of pitfalls and podman isn't any worse. On the plus side, any company I work for doesn't have to worry about licences. Win win!

It's works great until you need that one option from Docker Compose that is missing in Podman Compose (which is written in Python for whatever reason, yeah...).

Re: I ditched Docker for Podman

#382
post #46

Earlier quoted context omitted.

> On the plus side, any company I work for doesn't have to worry about licences. Win win! Was this a deal breaker for any company? I ask because the Docker Desktop paid license requirement is quite reasonable. If you have less than 250 employees and make less than $10 million in annual revenue it's free. If you have a dev team of 10 people and are extremely profitable to where you need licenses you'd end up paying $9…

I've seen a weird thing on their service agreement: Use Restrictions. Customer and its Users may not and may not allow any third party to: [...] 10. Access the Service for the purpose of developing or operating products or services intended to be offered to third parties in competition with the Services[...] Emphasis mine on 'operating'. So I cannot use Docker Desktop to operate, for example: ECR, GCR or Harbor?

I think the Service in question is services like Docker Hub that they don't let you use as the infrastructure for your competing site.

Re: I ditched Docker for Podman

#383
post #214

I've been on Podman for about two years now. My coworkers and the entire company codebase / scripts etc are on Docker. Podman has a number of caveats that make it not a drop in replacement out of the box, but they are mostly few and far between. Once you've learned to recognize a handful of common issues, it's quite simple to migrate. This might sound like me trying to explain away some of the shortcomings of podman,…

Do you have a summary of those most common issues and their workarounds?

Broadly, the claim that Podman is a drop-in replacement for Docker is true only for the simple cases, but people have developed assorted dependencies on Docker implementation details. Examples:

1. People hear about how great rootless is with Podman but then expect to be able to switch directly from rootful Docker to rootless Podman without changing anything. The only way that could work is if there was no difference between rootful and rootless to begin with, but people don't want to hear that. They combine these two selling points in their head and think they can get both a drop-in replacement for Docker and also rootless by default. The proper choice is to either switch from rootful Docker to rootful Podman *or* put in the work to make your container work in rootless, work you would also have had to do with rootless Docker.

2. Docker Compose started out as an external third-party add-on (v1) which was later rewritten as an internal facility (v2) but `podman compose` calls out to either `docker-compose` (i.e. v1) or to its own clone of the same mechanism, `podman-compose`. The upshot is a lot of impedance mismatch. Combine that with the fact that Podman wants you to use Quadlets anyway, resulting in less incentive to work on these corner cases.

3. Docker has always tried to pretend SELinux doesn't exist, either by hosting on Debian and friends or by banging things into place by using their privileged (rootful) position. Podman comes from Red Hat, and until recently they had Mr SELinux on the team. Thus Podman is SELinux-first, all of which combines to confuse transplants who think they can go on ignoring SELinux.

4. On macOS and Windows, both Podman and Docker need a background Linux VM to provide the kernel, without which they cannot do LXC-type things. These VMs are not set up precisely the same way, which produces migration issues when someone is depending on exact details of the underlying VM. One common case is that they differ in how they handle file sharing with the host.

Re: I ditched Docker for Podman

#384

The main issue is podman support on Ubuntu. Ubuntu ships outdated podman versions that don't work out of the box. So I use podman v5, GitHub actions uses podman v3, and my coworkers on Ubuntu use docker. So now my script must work with old podman, recent podman and docker

That's an Ubuntu issue though, they ship lots of outdated software. Nginx, PHP, PostgreSQL, Podman, etc, the critical software that must be updated asap, even with stable versions they all require a PPA to be properly updated.

Re: I ditched Docker for Podman

#385
post #38

Earlier quoted context omitted.

On Mac we just switched to podman and didn't have anything to worry about.

Cant imagine being forced to use a linux PC for work lmao

I happily embraced it, to each their own I guess. There are folks who mainly work on their mac/windows laptops and just ssh into their workstation, but IT gives us way more freedom (full sudo access) on Linux so I can customize a lot more which makes me a lot happier.

Re: I ditched Docker for Podman

#386

Earlier quoted context omitted.

I have personally given up trying to get a $25 product purchased through official channels. The process can make everything painful.

Congrats, the process fulfilled it's purpose. Another small cost saved :)

Trust me, the thought crossed my mind. They definitely beat me.

Re: I ditched Docker for Podman

#387

I did numerous attempts to switch from docker to podman. Latest one worked, and so far I didn't feel the need to get back to docker. There was only one issue that I had: huge uid didn't work in podman (like 1000000 I think), but I fixed the dockerfile and rest worked fine for me. podman-compose does not work well in my experience, but I don't use it anymore.

> huge uid didn't work in podman (like 1000000 I think)

You're running into the `/etc/sub[ug]id` defaults. The old default was to start your normal user at 100000 + 64k additional sub-IDs per user, but that changed recently when people at megacorps with hundreds of thousands of employees defined in LDAP and similar ran into ID conflict. Sub-IDs now start at 2^19 on RHEL10 for this reason.

Re: I ditched Docker for Podman

#388

I ditched Docker and Podman for FreeBSD Jails :) More here: - https://vermaden.wordpress.com/2023/06/28/freebsd-jails-cont... - https://vermaden.wordpress.com/2025/04/11/freebsd-jails-secu... - https://vermaden.wordpress.com/2025/04/08/are-freebsd-jails-... - https://vermaden.wordpress.com/2024/11/22/new-jless-freebsd-...

Can you run MS SQL Server inside a FreeBSD jail? Or any of the thousands of other ready to run docker containers?

Whatever you gain by running FreeBSD comes at a high cost. And that high cost is keeping FreeBSD jails from taking over.

Re: I ditched Docker for Podman

#389
post #46

Earlier quoted context omitted.

> On the plus side, any company I work for doesn't have to worry about licences. Win win! Was this a deal breaker for any company? I ask because the Docker Desktop paid license requirement is quite reasonable. If you have less than 250 employees and make less than $10 million in annual revenue it's free. If you have a dev team of 10 people and are extremely profitable to where you need licenses you'd end up paying $9…

I think that I never saw somebody using Docker Desktop. I saw running containers with the command line everywhere, but I maybe I did not notice. No licenses for the command line tools, right?

The command-line tools on a Mac usually come from Docker Desktop. The homebrew version of docker is bare-bones and requires the virtualbox-based docker-machine package, whereas Desktop is using Apple's Virtualization Framework. Nobody runs the homebrew version as far as I can tell.

On Windows, you can use the docker that's built in to the default WSL2 image (ubuntu), and Docker Desktop will use it if available, otherwise it uses its own backend (probably also Hyper-V based).

I use Orbstack myself, but that's also a paid product.

Re: I ditched Docker for Podman

#390

I ditched Docker and Podman for FreeBSD Jails :) More here: - https://vermaden.wordpress.com/2023/06/28/freebsd-jails-cont... - https://vermaden.wordpress.com/2025/04/11/freebsd-jails-secu... - https://vermaden.wordpress.com/2025/04/08/are-freebsd-jails-... - https://vermaden.wordpress.com/2024/11/22/new-jless-freebsd-...

How is that any different than running VMs on a linux host?
Post reply on HN