News for hackers. Stuff that matters.
Re:Kata Containers: The speed of containers, the security of... by pvorb on Wednesday October 04, 2023 @07:30AM (#37763638)
To be honest I never even tried out Podman, even though I keep reading positive things about it. But the entire Docker ecosystem is complex enough on its own, so I fear that exchanging the container runtime entirely will cause a lot of problems that I don't know about today.
Re:Kata Containers: The speed of containers, the security of... by goku12 on Wednesday October 04, 2023 @07:41AM (#37763738)
Podman has docker-compatible CLI, Dockerfiles and even docker-compose compatibility. It won't be as painful as you worry. So just give it a try. And besides the advantages already mentioned (rootless, no-daemon and isolated network namespaces), podman has some additional nifty features like pods (like in K8s), quadlets (containers managed by systems), compatibility with k8s manifests, etc.
Re:Kata Containers: The speed of containers, the security of... by notnmeyer on Wednesday October 04, 2023 @11:58AM (#37767090)
undeniable that you'll have a thing or two pop up—whether or not it's worth it depends on how much you want to understand. despite differences in how it works, podman _is_ simpler.

the reality though is that you can install both docker and podman, and just start/stop docker as necessary. its easy enough to experiment with podman on a system with docker installed.

imo it's similar to folks that think learning a new shell is a huge undertaking. the reality is you just install the new thing and drop in and out of it as you get comfortable. if it sticks, cool, if not, also cool.