Back in "the old days", we'd use Linux-VServer to containerize stuff. It was a bit like LXC is today. You get a container that shares the same kernel, and have to install an OS inside it. The Docker approach of having an immutable container and all data stored in separate volumes was a game changer. It makes upgrades so much simpler since it can just throw away the container and build a new one.

The main alternative to Docker is Podman. Podman uses the same images/containers as Docker - technically they're "OCI containers" and both Docker and Podman implement the OCI spec.

Podman's architecture is different. The main difference with Podman is that it never runs as root, so it's better for security. With Docker, you can either run it as root or in rootless mode, but the default is running it as root.

[–] [email protected] 2 points 4 months ago* (last edited 4 months ago)

Wow, I really appreciate you taking the time. I'm bookmarking this. Thanks, Dan!

As I look to upgrade or re-factor the server a bit, I'm gonna take a closer look at Podman. Not running as root by default sounds extremely sensible!

I tried that with a few of my Docker containers with results ranging from "Did it actually do it?" to "Nice job breaking it, hero." Lol

OMV has a really nice Docker GUI built in, but I'd much rather be ready to understand the open-for-all solution if I could. :)

Hope you have a great one!