←back to thread

180 points teleforce | 1 comments | | HN request time: 0s | source
Show context
orthoxerox ◴[] No.43685880[source]
What is the killer feature that will make me want to switch from Docker Compose to Podman Quadlets?
replies(7): >>43685989 #>>43685992 #>>43686728 #>>43687129 #>>43687706 #>>43688911 #>>43690483 #
dharmab ◴[] No.43685989[source]
I prefer quadlet for 2 reasons:

1. Podman is simpler than Docker. There is no long-running daemon. Rootless is default.

2. Quadlets can be managed as systemd services, giving me the same tools to manage and view logs for system daemons and containers.

Quadlets have been especially nice for bundling up an AI app I wrote as a cloud-init file, making it easy to deploy the hardware, software and models as one artifact.

replies(2): >>43686670 #>>43687155 #
pydry ◴[] No.43686670[source]
quadlets == systemd which requires root to run. this is NOT the same thing as "systemd cant run non root containers". OBVIOUSLY it can, just as docker can run non root containers.

Making systemd a necessary dependency to run > 1 container kinda negates many of the the nice advantages that podman has of not requiring root.

podman compose doesnt require root and would serve as a substitute but it's a very neglected piece of software.

replies(3): >>43686855 #>>43686924 #>>43686928 #
voxadam ◴[] No.43686924[source]
systemd user units can be run by non-root users.

https://wiki.archlinux.org/title/Systemd/User

replies(1): >>43686977 #
pydry ◴[] No.43686977[source]
not the point as i mentioned above.

systemd itself requires root.

replies(3): >>43687015 #>>43687216 #>>43687686 #
voxadam ◴[] No.43687015[source]
Installing packages (like podman or moby/docker) using dnf and apt requires root as well, so I'm not sure what your point is.
replies(1): >>43687039 #
pydry ◴[] No.43687039{3}[source]
making systemd - a root service - a necessary dependency in order to orchestrate > 1 nonroot containers is both unnecessary and bad architecture.

It was a shitty decision that renders it just "a less popular docker" and not "a better docker".

replies(2): >>43687114 #>>43687211 #
exceptione ◴[] No.43687211{4}[source]
wut? Containers need an operating system.

systemd runs on a linux host, the rootless container runs on a linux host, controlled by `systemctl --user ...`.

replies(1): >>43725344 #
1. esseph ◴[] No.43725344{5}[source]
But you don't understand, it also needs an operating system therefore it is vulnerable, because things on it run as root! /s