Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
1–10 of 89 posts
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#2What took them so long?
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#3What took them so long?
Waiting for IBM to buy them? (half joking)
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#4What took them so long?
My take was they sort of dug in said "Docker isn't made right for Linux, we're reinventing it"
On Fedora w/ SELinux that led to quite a bit of compatibility issues for a while with lots of quirky things that didn't behave the same.
I think their implementations have gotten pretty stable and improved in compatibility since then
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#5Does podman support docker compose files well? Devs love them for local environments.
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#6Reading about Keycloak and how long it is taking to patch critical vulnerabilities, I wonder is CNCF becoming how Apache was - where abandoned open source software goes to die.
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#7What took them so long?
My take was they sort of dug in said "Docker isn't made right for Linux, we're reinventing it" On Fedora w/ SELinux that led to quite a bit of compatibility issues for a while with lots of quirky things that didn't behave the same. I think their implementations have gotten pretty stable and improved in compatibility since then
That's my take as well. Red Hat's design choices fit into Linux much more neatly. Docker has always been rubbish with late cgroups v2 support, punching holes in my firewall, no rootless, etc.
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#8Does podman support docker compose files well? Devs love them for local environments.
I've been using podman-compose, yes.
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#9Does podman support docker compose files well? Devs love them for local environments.
I’ve been using it on my Fedora server because I make myself. I think all functionality and syntax is covered. However, the user feedback and TUI of docker-compose is way nicer (interactive at least). Also, podman compose does seem to recreate containers that do not need to be recreated in more cases than I have noticed docker compose do.
Re: Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
#10Earlier quoted context omitted.
My take was they sort of dug in said "Docker isn't made right for Linux, we're reinventing it" On Fedora w/ SELinux that led to quite a bit of compatibility issues for a while with lots of quirky things that didn't behave the same. I think their implementations have gotten pretty stable and improved in compatibility since then
That's my take as well. Red Hat's design choices fit into Linux much more neatly. Docker has always been rubbish with late cgroups v2 support, punching holes in my firewall, no rootless, etc.
> punching holes in my firewall
I teach various Linux training courses. One of which is Containers. It always shocks several people per-class how Docker just blatantly ignores and rewrites existing firewall rules. And there's no real option to prevent that unless you want to manually configure ALL network routing.
For me personally, that was one of the big issues the pushed me over to Podman.
Also, Docker's insistence on "forcing" and preventing the disabling of using the malware-ridden Docker Hub didn't help me appreciate their security practices.[]
[]
https://jfrog.com/blog/attacks-on-docker-with-millions-of-ma...
https://www.infosecurity-magazine.com/news/malicious-contain...
https://www.bleepingcomputer.com/news/security/millions-of-d...
https://www.bleepingcomputer.com/news/security/docker-hub-re...
https://sysdig.com/blog/analysis-of-supply-chain-attacks-thr...
... ETC ...