Hacker News Reader

Parent Full thread

jsheard

Not if you run it in rootless mode, which is more of a first class citizen in Podman compared to Docker.

View on HN

> Not if you run it in rootless mode.

Same as for docker, yes?

https://docs.docker.com/engine/security/rootless/

nope. You should look at https://docs.docker.com/engine/network/

Networking is just better in podman.

> nope. You should look at https://docs.docker.com/engine/network/

That page does not address rootless Docker, which can be installed (not just run) without root, so it would not have the ability to clobber firewall rules.

Rootless exists in Docker, yes, but as OP said, it's not first-class. The setup process is clunky, things break more often. In podman it just works, and podman is leading with features like quadlets, which make docker services just services like any other.

No one wants, nor asked for, quadlets.

Reply on news.ycombinator.com