Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Podman or Docker?

DejavuMoeDejavuMoe Member
edited April 24 in General

Currently, I use Docker and Docker Compose to host the vast majority of my services, across all my chickens, there are probably more than 40 such stacks.

recently I have experimented with Podman; to ensure a smooth transition, I am currently using podman-compose—though I am aware that this is not the solution officially recommended by Podman.

My current points of interest are Podman's daemonless architecture (though I don't really care much about that) and its extremely user-friendly rootless containers—which is the feature I appreciate most, especially given the increasing number of supply chain poisoning incidents we've seen in the "Vibe Coding" era.

If I choose not to use a "compatibility layer" like podman-compose, I would need to migrate my services to a configuration syntax such as Quadlet; however, I am unsure whether this transition process would prove to be a painful one.

I would appreciate hearing about some real-world experiences to help me determine whether it is worth the time and effort to fully migrate from Docker to Podman.

Which container stack would you choose?
  1. Docker34 votes
    1. Podman
      58.82%
    2. K8s/K3s
      17.65%
    3. Others(Plz tell me)
      23.53%
«1

Comments

  • docker

  • @Rubben said:
    docker

    over past years, as I become familiar with the Docker, I have found that whenever I deploy a service, I often have to make increasingly extensive modifications to the compose.yml configuration file—specifically to minimize privilege scope and enhance security as much as possible.

    While the process of configuring Docker's Rootless mode can be somewhat tedious, for the vast majority of open-source services, Docker remains the most widely adopted solution among hobbyists and general users.

    Consequently, to spare myself from this persistent hassle, I am currently considering whether I should make this transition sooner rather than later. :|

  • RubbenRubben Member

    @DejavuMoe said:

    @Rubben said:
    docker

    over past years, as I become familiar with the Docker, I have found that whenever I deploy a service, I often have to make increasingly extensive modifications to the compose.yml configuration file—specifically to minimize privilege scope and enhance security as much as possible.

    While the process of configuring Docker's Rootless mode can be somewhat tedious, for the vast majority of open-source services, Docker remains the most widely adopted solution among hobbyists and general users.

    Consequently, to spare myself from this persistent hassle, I am currently considering whether I should make this transition sooner rather than later. :|

    Thats the point of a docker compose file is that you write it once, then - unless some modifications are needed, new volume etc - you don't touch it, it is reusable. That alone is not a good reason imo to switch to podman especially since, as you said it too, it is the most widely used amongst hobbyists, in general, and in enterprise too.

  • @Rubben said:

    @DejavuMoe said:

    @Rubben said:
    docker

    over past years, as I become familiar with the Docker, I have found that whenever I deploy a service, I often have to make increasingly extensive modifications to the compose.yml configuration file—specifically to minimize privilege scope and enhance security as much as possible.

    While the process of configuring Docker's Rootless mode can be somewhat tedious, for the vast majority of open-source services, Docker remains the most widely adopted solution among hobbyists and general users.

    Consequently, to spare myself from this persistent hassle, I am currently considering whether I should make this transition sooner rather than later. :|

    Thats the point of a docker compose file is that you write it once, then - unless some modifications are needed, new volume etc - you don't touch it, it is reusable. That alone is not a good reason imo to switch to podman especially since, as you said it too, it is the most widely used amongst hobbyists, in general, and in enterprise too.

    What @Rubben said

    Thanked by 1DejavuMoe
  • nepeusnepeus Member

    @barbarza said:

    @Rubben said:

    @DejavuMoe said:

    @Rubben said:
    docker

    over past years, as I become familiar with the Docker, I have found that whenever I deploy a service, I often have to make increasingly extensive modifications to the compose.yml configuration file—specifically to minimize privilege scope and enhance security as much as possible.

    While the process of configuring Docker's Rootless mode can be somewhat tedious, for the vast majority of open-source services, Docker remains the most widely adopted solution among hobbyists and general users.

    Consequently, to spare myself from this persistent hassle, I am currently considering whether I should make this transition sooner rather than later. :|

    Thats the point of a docker compose file is that you write it once, then - unless some modifications are needed, new volume etc - you don't touch it, it is reusable. That alone is not a good reason imo to switch to podman especially since, as you said it too, it is the most widely used amongst hobbyists, in general, and in enterprise too.

    What @Rubben said

    What @barbarza said

  • fredo1664fredo1664 Member
    edited April 24

    Podman quadlet

    Thanked by 1DejavuMoe
  • AnanchoretaAnanchoreta Member
    edited April 24

    Podman.

    Test with podman compose, later on just let it run as quadlet.

    (And this in most cases also stuffed into incus container)

    Thanked by 1DejavuMoe
  • @fredo1664 said:
    Podman quadlet

    🤔

  • openidopenid Member

    docker

  • AnanchoretaAnanchoreta Member
    edited April 24

    @barbarza said:

    @fredo1664 said:
    Podman quadlet

    🤔

    Podman Quadlet creates from the configs systems (user) units (and keeps them up to date.)

    So it's docker compose to test it, convert it to quadlets and system handles the rest.

    Thanked by 1DejavuMoe
  • @Ananchoreta said:

    @barbarza said:

    @fredo1664 said:
    Podman quadlet

    🤔

    Podman Quadlet creates from the configs systems (user) units (and keeps them up to date.)

    So it's docker compose to test it, convert it to quadlets and system handles the rest.

    You're talking to a dinosaur!

    Thanked by 1barbarza
  • Transitioning from Docker to Podman is just the next step in evolution! ;)

    Thanked by 3DejavuMoe fredo1664 tux
  • @Ananchoreta said:

    @barbarza said:

    @fredo1664 said:
    Podman quadlet

    🤔

    Podman Quadlet creates from the configs systems (user) units (and keeps them up to date.)

    So it's docker compose to test it, convert it to quadlets and system handles the rest.

    goood idea!

  • @Ananchoreta said:
    Transitioning from Docker to Podman is just the next step in evolution! ;)

    nexxxxt step is Kubernetes?

  • WebProjectWebProject Veteran, 🚩 Host Rep Tag Suspended

    K3S / K8S is my personal choice!

    Thanked by 1DejavuMoe
  • Yuki_Yuki_ Member

    LXC

  • TarballTarball Member
    edited April 24

    You can continue to use docker-compose with Podman by enabling its Docker-compatible API socket.

    https://oneuptime.com/blog/post/2026-03-17-configure-podman-socket-docker-compose/view

  • MurvMurv Member, Megathread Squad

    Podman, just because it doesn't mess up my precious handwritten nftables rules

  • e2bs2k1e2bs2k1 Member

    incus lxc

  • @Murv said:
    Podman, just because it doesn't mess up my precious handwritten nftables rules

    Too old now, who uses nft, just provider firewall or no firewall....

    Thanked by 1Murv
  • minioptminiopt Member

    Podman because quadlets and rootless containers.

    Thanked by 1DejavuMoe
  • MurvMurv Member, Megathread Squad

    @buggedout said:

    @Murv said:
    Podman, just because it doesn't mess up my precious handwritten nftables rules

    Too old now, who uses nft, just provider firewall or no firewall....

    Provider firewall is good enough for simple filtering but you can do NAT, packet mangling, ratelimits and other fun stuff with nftables.

    Thanked by 2DejavuMoe buggedout
  • why not rootless docker?

  • docker, cause you never know when server might get a reboot.

  • Personally, I still use Docker because it's simpler.

    Thanked by 1Rubben
  • RoccoRocco Member

    Docker

  • @S1M0N_SMN said:
    Personally, I still use Docker because it's simpler.

    Is it? More overhead you get with docker.. But all else?

    podman compose up -d

  • @Ananchoreta said:

    @barbarza said:

    @fredo1664 said:
    Podman quadlet

    🤔

    Podman Quadlet creates from the configs systems (user) units (and keeps them up to date.)

    So it's docker compose to test it, convert it to quadlets and system handles the rest.

    How do you maintain the quadlets if you want IaC?

  • @buzzyLET said:
    why not rootless docker?

    Last time (4 years ago) I tried rootless to run a torrent client and ~50 containers overall I would see packets dropped randomly. That didn't happen when running as root. From my (limited) understanding it was the slirp4netns library running single-threaded.

Sign In or Register to comment.