Hacker News Reader

Comment by pzmarzly | Hacker News Reader

Runs on demand, doesn't require root, can be nested, usually uses newer and simpler primitives (e.g. a few nftables rules in Podman vs iptables spaghetti in Docker). In my experience it is ~90% compatible with Docker. The author explains the practical differences in the blog post https://www.edu4rdshl.dev/posts/from-docker-to-podman-full-m...

It is usually easier to install - most distros ship relatively recent version of Podman, while Docker is split between docker.io (ancient), docker-ce (free but non in repos) and docker-ee.

Not everything is rosy, some tools expect to be talking to real Docker and don't get fooled by `ln -s docker podman`. But it is almost there.

Regarding Debian, just `sudo apt install podman && podman run -it debian` - see https://wiki.debian.org/Podman

View on HN

Careful, the version in Debian 12 is old and apparently just barely predates the "good" versions.

I had so many problems that I went back to Docker, because current Podman didn't seem to be trivially installable on Debian 12.

In general, if one is happy to run very old versions of software Debian can be your driver. If not, you are in for pain in my experience. (That is also why Ubuntu as default Linux is a tragedy, old bugs and missing features mean that it is not really attractive to officially support Linux for vendors.)

I've not experienced something on this scale for many years, "Debian stable packages are so outdated" is mostly a meme. Debian 12 was 1y old when I did this and very often you can relatively easily find a backport or build one - but I think in this case it was either glibc or kernel, that's why "just run upstream" didn't work.

What’s the point of using a distribution if you need to find back ports or build your own? Distros are, after all, mostly collections of installable software.

The point is that it works 95% of the time, or probably more like 98%.

If this is a e.g. webserver and I only need my fastcgi backend built by myself, I can still have reverse proxy, database, and every other package be done by the distro.

No one said you need backports. More like: If it fits 90% and one package doesn't work, you get it from somewhere else - that doesn't invalidate the concept of a distro for me. YMMV

Honest question: wouldn't that make you more nervous you now arrived at an unknown/unsupported configuration?

Boring stability is the goal, but if Debian does not fit as is, then why not find a total package that is somewhat more cutting edge but does fit together? Especially given the fact that Debian does customization to upstream, so esoteric times esoteric.

It doesn't make me nervous because Debian has only let me down a couple of times over nearly 20 years and for example Ubuntu und RHEL and SLES have let me down dozens of times each.

Also I don't usually run "supported". I just run a system that fits my needs.

Thanks for following up. Yeah, I should rather have said "tested/vetted".

I maintain a couple of Debian servers and this is how I do it too.

Reverse proxy, DB, etc from Debian. The application server is built and deployed with nix. The Python version (and all the dependencies) that runs the application server is the tagged one in my nix flake which is the same used in the development environment.

I make sure that PostgreSQL is never upgraded past what is available in the latest Debian stable on any on the dev machines.

I did not have this same experience, all my VPS successfully run Debian’s podman package with zero issue running containers.

Glad to hear. When I brought it up somewhere I got exact the "oh you're running 4.x - we also had that problem, but 5 works fine".

Reply on news.ycombinator.com