Hacker News Reader

podman seems to handle rootless namespaces just fine, minor caveat for some perf overhead but it's not the end of the world.

And volumes. Volumes are not fun with podman. Ironically my team tried GitHub Codespaces and never looked back. Super cheap and uses DevContainers.

What's the difference between Podman and docker for volumes? Other than needing to add Z to get volumes to mount with SELinux

Maybe permissions when going rootlesz?

If you're root on a system and use Docker volumes, you can always `sudo ls` and access those volumes outside of the container.

If you're just a user running containers under Podman, it's more tricky.

`podman unshare && podman mount`