検索

《Podman极简指南：无守护进的容器新选择》

1. 极简命令对比
"从Docker迁移到Podman？常用命令对比：
docker ps → podman ps
docker build → podman build
无守护进程/rootless才是未来✨ 容器技术 DevOps"

2. 安全优势
"为什么红帽推荐Podman？
✅ 无守护进程架构
✅ 支持rootless模式
✅ 兼容Docker CLI
安全性和性能双赢💡 容器安全"

3. 实用技巧
"Podman冷知识：
1. podman generate systemd 生成服务单元
2. podman play kube 运行K8s Pod
3. 镜像加速：修改/etc/containers/registries.conf
无守护进程也能玩转容器🚀"

4. 开发场景
"本地开发用Podman+Compose：
podman-compose up -d 启动服务栈
podman exec -it 进入容器调试 轻量又安全，告别权限烦恼👨💻 开发工具" #Podman

TIL someone create a tool to deploy things in #podman with #quadlets from a repository, including #Nextcloud! https://github.com/rgolangh/pq https://github.com/nextcloud/all-in-one/discussions/3487#discussioncomment-11010068 #containers #Linux

For #podman CLI: https://developers.redhat.com/blog/2019/01/15/podman-managing-containers-pods#create_a_pod You can also use quadlets to do this for more complex deployments, so you can do some k8s like things without k8s: https://www.redhat.com/sysadmin/multi-container-application-podman-quadlet

Did you know that you can have multiple containers in one pod? #Linux #Kubernetes #podman #containers

Finally making progress on running Jenkins #podman jobs in #Kubernetes. The latter is most of the complication. Doing podman in Kubernetes is not yet for the faint of heart, but definitely possible. If you just need to build images, #Binderhub from #JupyterHub handles it in an elegant way in the helm chart using a daemonset and initializing a unique socket.

Just in case no one has mentioned it lately, #podman is legitimately amazing. #Linux #containers

Podman v5.0 Release annoucement is here! Updates and speed-ups for running on macOS and Windows, Apple Hypervisor support, stability fixes, performance improvements, and more! Details: https://blog.podman.io/2024/03/podman-5-0-has-been-released/ #opensource #podman

Hot off the presses! There's a new release in town! Podman v5.0 just landed. Off to Fedora and other distros shortly. https://github.com/containers/podman/releases/tag/v5.0.0 More info coming soon! #podman #opensource

Podmanを動かして学ぶ！rootlessコンテナ入門 https://qiita.com/k-hoshihara/items/0380083e2849b7b5818f?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items #qiita #Java #Docker #RHEL #rootless #Podman

A bit of fun testing out the newer #podman desktop.

FYI, #podman generate #systemd has recently been deprecated in favor of #quadlet, which is a systemd-native way to launch and manage #containers. quadlet is a separate package from podman in #Fedora. https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html#examples

Some very good news. #podman support in #SystemInitiative is coming along! The discord (yeah, I know) is very active right now. If you have ways you might want to contribute or test and give feedback for this fresh #opensource #DevOps service, it's a good time to jump in the pool.

Hmm, it almost works. There's a #podman engine option in si, but it gives this fancy error message:

"Podman isn't supported as an engine at this time! It's coming soon though..."

Progress. Just had to set:

export SI_DOCKER_SOCK=/run/podman/podman.sock

Then si start progressed using #podman. #systeminit #SystemInitiative

I think I'll see how far I can get using #podman. Whenever I see "this requires #docker", I always seem to take that as a dare and a challenge to prove it false.