news.volyx.in

I ditched Docker for Podman (codesmash.dev)

1123 points by codesmash · 325 days ago · 654 comments on HN

Article summary

The article discusses the author's decision to switch from Docker to Podman, a daemonless container engine, due to security concerns and performance issues. The author highlights the benefits of Podman, including its ability to run containers without a persistent background service, improved security, and lighter resource footprint. The article also provides a step-by-step guide on how to migrate from Docker to Podman. The author concludes that Podman is a clear evolution in container technology, offering a more secure and thoughtfully architected solution.

Main themes

  • Containerization
  • Security
  • Performance
  • Migration
  • Daemonless architecture
  • Kubernetes alignment

What commenters say

  • Some users find Podman to be a suitable replacement for Docker, especially for local development and testing, but may not be necessary for production environments that already use Kubernetes.
  • The lack of documentation and stability issues with Podman are major concerns for some users, making it difficult to adopt as a reliable alternative to Docker.
  • Podman's daemonless architecture and improved security features make it a more attractive option for users who prioritize security and performance.
  • The migration process from Docker to Podman can be relatively smooth, but may require additional setup and configuration, particularly for complex environments.
  • Some users prefer to use alternative tools, such as OrbStack, for containerization and development, due to their ease of use and additional features.
  • The cost of using certain containerization tools and platforms, such as Docker Desktop, can be a significant factor in deciding which solution to use.
  • Podman's compatibility with Kubernetes and other container orchestration tools is a major advantage for users who already invest in these ecosystems.
  • The trade-offs between using Podman and Docker depend on specific use cases and requirements, and some users may find that Docker is still the better choice for their needs.