Hacker News Reader

You can do it very easily with podman without sudo or any root access.

The aforementioned user namespaces and accompanying complexity come into play here, and you're going to take a performance hit using FUSE for fs and slirp for networking. I'm not saying these are bad tools, just that we need something simpler without sacrificing performance.

There might be complexity under the hood, but on a fresh Fedora install I can do, out of the box:

$ podman run -it myimage bash

Fuse is rather irrelevant since I will mount volumes if I need to do IO. And slirp has been benchmarked to 9+ Gbps. So sure there's always room for improvement but the current situation is pretty sweet imo.

Reply on news.ycombinator.com