Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I ditched Docker for Podman

codesmash.dev

Post reply on HN
Print view View original

91–100 of 670 posts

Re: I ditched Docker for Podman

#91

Post by teekert »

diarrhea wrote: post #60

One challenge I have come across is mapping multi-UID containers to a single host user. By default, root in the container maps to the user running the podman container on the host. Over the years, applications have adopted patterns where containers run as non-root users, for example www-data aka UID 33 (Debian) or just 1000. Those no longer map to your own user on the host, but subordinate IDs. I wish there was an ea…

This. And then some way to just be “yourself” in the container as well. So logs just show “you”.

Re: I ditched Docker for Podman

#92

Post by markstos »

I'm a podman user and fan, but there is one gotcha to know about the systemd integration.

You might expect that setting User=foo via systemd would enable seamless rootless containers, but it turns out to be a hard problem without a seamless solution.

Instead, there's this discussion thread with 86 comments and counting to wade through to find some solutions that have worked for some people in some cases.

https://github.com/containers/podman/discussions/20573#discu...

Re: I ditched Docker for Podman

#93

Post by osigurdson »

drzaiusx11 wrote: post #76

Still happily using Colima as a Docker Desktop for Mac replacement. It even allows mixed architecture containers in the same compose stack. What's podman gain me besides a half baked Docker compose implementation?

Keep using docker, who cares. The article is concerned about CVEs, etc, but this doesn't matter for development very much.

If you use k8s for anything, podman might help you avoid remembering yet another iac format.

Re: I ditched Docker for Podman

#94

Post by hyperpape »

I have a few links saved from my joyful experience using podman with Fedora (and therefore selinux). Iirc, I tried using podman because Fedora shipped cgroups v2, which didn't work with Docker (in my own ignorance, I would've thought coordinating with major dev tools would be important, but distros often have other ideas).

- https://www.redhat.com/en/blog/user-namespaces-selinux-rootl... - https://www.redhat.com/en/blog/sudo-rootless-podman

I'd summarize these posts as "very carefully explaining how to solve insane problems."

Re: I ditched Docker for Podman

#95

Post by mariusor »

solarkraft wrote: post #74
stingraycharles wrote: post #19

Earlier quoted context omitted.

Which actually makes a lot of sense, to hand over the orchestration / composing to systemd, since it’s not client server API calls (like with docker) anymore but actual userland processes.

It totally does! On the con side, I find systemd unit files a lot less ergonomic to work with than compose files that can easily be git-tracked and colocated.

What makes a systemd service less ergonomic? I guess it needs a deployment step to place it into the right places where systemd looks for them, but is there anything else?

Re: I ditched Docker for Podman

#96

Post by hallway_monitor »

politelemon wrote: post #73
esseph wrote: post #63

Earlier quoted context omitted.

Having an LLM function as a translation layer from docker compose to k8s yaml works really well. On another note, podman can generate k8s yaml for you, which is a nice touch and easy way to transition.

Use an LLM is not a solution. It's effectively telling you to switch your brain off and hope nothing goes wrong in the future. In reality things do go wrong and any conversation should be done with a good understanding of the system involved.

While I agree with this concept, I don't think it is applicable here. Docker compose files and k8s yaml are basically just two different syntaxes, saying the same thing. Translating from one syntax to another is one of the best use cases for an LLM in my opinion. Like anything else you should read it and understand it after the machine has done the busy work.

Re: I ditched Docker for Podman

#98

Post by osigurdson »

leoc wrote: post #77

To bikeshed a little, "Why I Ditched Docker for Podman, And Why You Should Too" would be better than the current headline of "Why I Ditched Docker for Podman (And You Should Too)": the "you should too" part is after all the main message of the article, not a side-point.

"You should too" is the part that annoys me. I use podman but if you are happy with docker, fill your boots.

Re: I ditched Docker for Podman

#99

Post by GrantMoyer »

matsemann wrote: post #34
Izmaki wrote: post #31

Earlier quoted context omitted.

None of your companies need to worry about licenses. Docker ENGINE is free and open source. Docker DESKTOP is a software suite that requires you to purchase a license to use in a company. But Docker Engine, the core component which works on Linux, Mac and Windows through WSL2, that is completely and 1000% free to use.

If you've installed Docker on Windows you've most likely done that by using Docker Desktop, though.

Docker Engine without Docker Desktop is available through winget as "Docker CLI"[1].

[1]: https://github.com/microsoft/winget-pkgs/tree/master/manifes...

Post reply on HN