News for hackers. Stuff that matters.

A comment on Podman 4.0. Parent comment

Re:Podman 4.0 by stingraycharles on Tuesday February 22, 2022 @04:54PM (#30434452)
From a security perspective, a daemon is a nightmare. It makes so much more sense to inherit the permissions from the process it’s launched from, and as such I’m a big proponent of podman (or rkt in a distant past).
[ Parent | on HN ]
Re:Podman 4.0 by zaphirplane on Tuesday February 22, 2022 @05:17PM (#30434664)
there is more to it.

If you are running kubernetes there are k8s daemons already possibly CRI-O containerd Otherwise the pod is started by systemd, which is another daemon

A Started from the command line using podman, is not a production pattern

[ Parent | on HN ]
Re:Podman 4.0 by JMS2021 on Tuesday February 22, 2022 @06:23PM (#30435297)
Correct. We are not allowed any command line access to worker nodes or containers. If it isn't deployed using automation, it isn't deployed.
[ Parent | on HN ]