502
Every time I use podman (lemmy.nz)
submitted 2 days ago* (last edited 22 hours ago) by WolfLink@sh.itjust.works to c/linuxmemes@lemmy.world
206 comments fedilink hide all child comments

EDIT: For some context, I recently gave podman another go. I have a few services on my homelab server set up in docker containers, so I tried migrating to podman.

After the second major bug (open issue on github) I encountered looked like it would require completely dropping using compose files to work around, I gave up and went back to docker.

I like the idea of podman, but it’s just not stable. I’ll try again in a year or so.

As a bonus, docker’s CLI is significantly nicer.

top 50 comments
sorted by: hot top new old
[-] ComradePenguin@lemmy.ml 1 points 7 hours ago

Home sweet home

[-] MonkeMischief@lemmy.today 2 points 15 hours ago* (last edited 15 hours ago)

I'm intrigued a LOT by Podman but also I'm already running some Docker stuff and it's working.

I'd really like some guides on how to switch over and what all that entails, that isn't written like I have 13 cloud certificates and this is another day at the office LOL.

So, 100% skill issue on my part.

In great news though: OpenMediaVault has Podman support in its GUI now! Love them.

[-] socsa@piefed.social 2 points 20 hours ago

Docker at home:

chroot

[-] lian_drake@lemmy.world 35 points 1 day ago

Podman is unironically the better choice. Just try to make docker comply with your firewall...

[-] altphoto@lemmy.today 13 points 1 day ago

Docker bypasses your firewall and runs as root. Only an idiot would allow that shit.... I'm an idiot. But I'm fixing that.

[-] lemmyvore@feddit.nl 2 points 1 day ago

It doesn't "bypass your firewall"... it lets you shoot yourself in the foot. You're asking it to open ports without specifying an explicit network interface so it opens them on all interfaces. Which includes opening up the firewall, because what's the point of putting up a service and blocking it in the firewall.

Also, doing it by hand would be incredibly tedious. Docker automatically adjusts the rules to match the ports and interfaces to its private container netmasks, and brings them up or down as needed when the containers start/stop.

All you have to do is bind ports to localhost or to a private interface if you don't want the service to be publicly exposed.

Beginners get bitten by this because they say ports: 9999:9999 instead of ports: 127.0.0.1:9999:9999/tcp like they should. Unfortunately most examples out there use the terse version and never explain why it's bad.

[-] WolfLink@sh.itjust.works 1 points 22 hours ago

Podman is unironically the better choice.

I like the idea of podman, but it’s just not stable. This meme was inspired by my frustration of trying to switch.

Just try to make docker comply with your firewall.

I literally did this yesterday and it wasn’t that hard. You just add iptables:False to the docker config file.

load more comments (2 replies)
[-] abc@suppo.fi 3 points 23 hours ago

Podman is much better than docker though in pretty much every way

[-] RVGamer06@sh.itjust.works 7 points 1 day ago

y'all use containers still? I run my site with native installed software configured by hand like a TRUE sysadmin!

[-] Bane_Killgrind@lemmy.dbzer0.com 6 points 23 hours ago

You're that chain smoking black hat with a stack of computers, black out curtains several screens and not a single lightbulb.

[-] LiveLM@lemmy.zip 17 points 1 day ago

Ngl after trying out Rootless Podman on my system (I was playing with Distrobox) I kinda wanna switch my whole Homelab to it, I'm just lazy, afraid the move to rootless with blow up everything and have zero fucking free time.

[-] porkloin@lemmy.world 16 points 1 day ago

I am running my entire homelab from podman quadlets (systemd managed podman containers) and it’s honestly very dope. Podman gets a bad rap for being second tier to docker but they legit have a bunch of awesome features for Linux users specifically that make it way nicer. Using systemd for docker status can add some misdirection occasionally, but having the logs from containers directly in journalctl alongside the rest of my system logs is amazing

load more comments (1 replies)
[-] mlg@lemmy.world 62 points 2 days ago

Docker became a license nest despite actual devs using k8s like a normal person should.

Meanwhile podman gave us rootless containers, CDI, and quadlets which far outweighs whatever docker is limping to the barn with.

load more comments (1 replies)
[-] SaltyIceteaMaker@lemmy.ml 21 points 1 day ago* (last edited 1 day ago)

i genuinely run all my shit bare metal

[-] socsa@piefed.social 1 points 20 hours ago

Hopefully none of those things have dependency version conflicts

[-] SaltyIceteaMaker@lemmy.ml 1 points 1 hour ago

they do quite regularly

load more comments (1 replies)
[-] deathmetal27@lemmy.world 30 points 2 days ago

This is why I don't like Docker compared to Podman:

load more comments (6 replies)
[-] unitedwithme@lemmy.today 180 points 2 days ago

I choose Podman bc it's open source and that's kind of the reason for using everything as a container bc those are often also open source. Fuck docker

load more comments (53 replies)
[-] esc@piefed.social 110 points 2 days ago

Podman is a better choice.

load more comments (27 replies)
[-] lengau@midwest.social 31 points 2 days ago

I'm curious why you feel this way? I'm kinda the opposite — podman has features I use that Docker doesn't.

[-] WolfLink@sh.itjust.works 1 points 21 hours ago

This meme was inspired by my frustration from trying to switch. I like the idea of podman, but it just doesn’t work. Tbf the bugs I encountered this time were with podman compose rather than podman itself, but still, I’d rather use the tools that work. I’ve had similar experiences when I’ve tried to switch to podman in the past.

[-] lengau@midwest.social 1 points 15 hours ago

Interesting. I don't use any of the compose tools, so I've not faced that. I find Podman works reliably in places where I can't even get Docker to start working (such as RISC-V machines), but I also typically use podman for testing before deploying to k8s

load more comments (4 replies)
[-] CIA_chatbot@lemmy.world 136 points 2 days ago

Why would you use docker when you could use podman?

load more comments (15 replies)
[-] TheMightyCat@ani.social 109 points 2 days ago

Mom, i can i have podman?

Mom: we have podman at home.

Podman at home: rootless docker

load more comments
view more: next ›
this post was submitted on 24 Aug 2026
502 points (93.3% liked)

linuxmemes

32597 readers
2012 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry of any kind will not be tolerated. This is an LGBTQ+-friendly community -- if that is a problem for you, you should leave.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
  • Don't come looking for advice, this is not the right community.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves / tolerates / hates> systemd, and wants to interject for a moment. You can stop now.
    • 5. 🇬🇧 Language/язык/Sprache
  • This is primarily an English-speaking community. 🇬🇧🇦🇺🇺🇸
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
    • 6. (NEW!) Regarding public figuresWe all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.
    •  

    Please report posts and comments that break these rules!

    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 3 years ago
    MODERATORS
    poopsmith@lemmy.world
    zephyr@lemmy.world
    rtxn@lemmy.world