openpgp4fpr:74EDD2488126072A9E9FD0C7348F97E620E0BA7A

  • 0 Posts
  • 13 Comments
Joined 6 months ago
cake
Cake day: February 11th, 2024

help-circle

  • tekeous@usenet.loltoSelfhosted@lemmy.worldConfused about Podman
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    7
    ·
    13 days ago

    My major beef is we used to be able to run a Podman generate command to make a user systemd file and auto start and stop containers with that. Even entire clusters of pods with one easy command and then just use the system level start and stop. They removed it in favor of “quadlet”which works fine for single containers, but for a compose, they literally just use Kubernetes syntax and the official documentation says just use Kubernetes. Well, what the fuck is Podman for then?

    The biggest problem everyone ever has with Podman is it’s frustratingly obedient to SELinux. Docker just kind of makes its own permissions and opens its own ports and steamrolls past whatever security you have. Podman will refuse to read or write a directory for stupid reasons until you’ve gone round and round with SELinux, and then just when you have it working, when the container updates it locks the directory all over again(in my case, updating a Minecraft server to latest version would crash the server and lock the data directory). Red Hat continues to insist SELinux is cool and this is working as intended. Again, Docker just doesn’t give a shit and barges into the directory without a problem.


  • tekeous@usenet.loltoSelfhosted@lemmy.worldConfused about Podman
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    8
    ·
    edit-2
    13 days ago

    Podman is quickly becoming shit as Red Hat continues to remove features and recommend you use Kubernetes. I ended up removing it from my servers and switching to Debian from Fedora because I don’t like Red Hat mucking about with our open source community software.

    I still run Docker.