Programming

17431 readers

83 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]

founded 1 year ago

MODERATORS

snowe

Ategon

[email protected]

137

Podman is a daemon-less alternative to Docker, but with Rootless containers, grouping containers in pods, and systemd integration. What do you think of it? (lemmy.ml)

submitted 1 year ago by [email protected] to c/programming

30 comments fedilink hide all child comments

Podman is a lot like Docker: a tool for running OCI containers. While it maintains backwards compatibility with Dockerfile and docker-compose syntax, it offers a lot of other benefits:

daemonless: it can run containers without a daemon process running in the background.
Rootless: can run containers without root privileges
pods: can group containers into secluded pods, which share resources and network namespace

Podman has other features I haven't explored yet, like compatibility with Kubernetes yaml file, and being able to run containers as systemd units.

Have you used podman before? What are your thoughts on it?

you are viewing a single comment's thread
view the rest of the comments

[–] sbstp 32 points 1 year ago (2 children)

I tried replacing some components of my NAS server that were on docker/docker-compose with podman but unfortunately it was not a 100% drop-in replacement. I had networking issues in podman that I did not have in docker.

The network stack is implemented quite differently in podman than in docker, once you start using more advanced features the backward compatibility disappears.

Since it came second, I think it has a lot of technical advantages, avoiding docker's mistakes and what not. In the long term I'll probably switch to it, unless Redhat keeps shooting itself in the foot...

[–] [email protected] 9 points 1 year ago (1 children)

I personally liked podman's networking a lot more, but my issue is that it is not well documented. I hope that improves.

May I ask which networking issues you had?

[–] sbstp 4 points 1 year ago* (last edited 1 year ago) (1 children)

I think one of the issues I had was trying to run pihole with podman on a raspberry pi. I could not get DNS requests to work by just mapping the right ports. I ended up just running with --net=host and it worked, I didn't feel like debugging further.

I had other issues on my NAS but I don't remember what it was, I have a lot of services on it, qBittorrent, Wireguard, Jellyfin, Jackett, netdata, prometheus, samba, syncthing, pihole (redundant), wsdd all in docker.

[–] [email protected] 7 points 1 year ago

I ran into that same DNS issue with pi-hole but in a docker container, and the (bandaid) solution was to put the container in host network mode too. But turns out it's not an issue but a feature. By default pi-hole only responds to DNS queries from within its local network. The host machine's LAN is an external network to the containers, unless you set the container's network mode to host. Pi-hole does have a setting to make it respond to DNS queries from other networks as well, though. What I'm saying is, that might not have been a podman issue.

[–] [email protected] 4 points 1 year ago

You know they're going to