Rootless Containers with Podman (blog.nviso.eu)
from sv1sjp@lemmy.world to selfhosted@lemmy.world on 03 Feb 08:54
https://lemmy.world/post/42596452

#selfhosted

threaded - newest

_Nico198X_@europe.pub on 03 Feb 09:05 next collapse

LOVE podman

lambalicious@lemmy.sdf.org on 03 Feb 13:14 next collapse

It’s pretty great, and I like that the workflow for creating containers is sliiiightly easier than on Docker. I switched from Docker to Podman for most stuff about a year ago and so far there are only two hiccups that I lament:

  • the higher disk consumption due to not being able to share image storage. (I’ve tried with additionalstorages but that seems to only be respected for podman run; podman build and podman compose seem to ignore it and always pull images from the registries)

  • Some annoying isses with fule permissions due to rootless design - running rootless containers will create files under your user storage that you as a user have no permission to transfer or remove for cleanup or security, and severely breaks the output of tools like du or find due to error spammage.

Jayjader@jlai.lu on 03 Feb 23:04 collapse

In case you omitted the following out of ignorance and not by deliberate choice:

podman unshare can be used to (mostly) painlessly access the files created by rootless podman.

lambalicious@lemmy.sdf.org on 04 Feb 02:02 collapse

Oh thanks, I know well about it. podman unshare is the reason why those permission issues are not major (eg.: you don’t need to ever sudo to solve the permission issues rootless causes, I think?). But my going to was more focused o borking the output or workflow of using some of the “usual” tools of a Linux console, such as needing to account for the potential existence of a podman environment on the user account (or any given user account, if doing house cleaning under root) if you ever need to rely on the recursive results of things like chmod or find.

flango@lemmy.eco.br on 03 Feb 13:58 next collapse

Great overview

sv1sjp@lemmy.world on 03 Feb 16:25 collapse

Thank you🚀🚀

tau@infosec.pub on 04 Feb 03:07 next collapse

Always great to see more Podman, especially rootless!

KarnaSubarna@lemmy.ml on 04 Feb 06:12 collapse

Isn’t Podman rootless by default, unlike docker?

trolololol@lemmy.world on 04 Feb 03:56 collapse

I’ve heard of podman quite a bit but never tried it.

Is it truly free and open source?

Does it run only in Linux?

Spore@lemmy.ml on 04 Feb 06:46 next collapse

Is it truly free and open source?

Yes, both podman and podman-desktop are FOSS under Apache-2.0 license. And they prefer more open image hosts like quay.io by default (dockerhub is still available OOTB for it to be a drop-in replacement of docker)

Does it run only in Linux?

No, it runs on Linux, Windows and MacOS (through VMs on the latter two) and my experience is that it works better than docker on non-Linux machines.

chicuongle@lemmy.world on 04 Feb 07:14 collapse

I think that is a question about trust and time. As long as Redhat does not change their policy, YES. For an open source project is it very important if the community is big enough to defense big tech desire for money. In my opinion, Red Hat hat a very good business model to balance and in long time Podman will be free