▲ 66 ▼ LXD: Containers for Human Beings (secluded.site) submitted 2 years ago by Voyager@psychedelia.ink to c/linux@lemmy.ml 25 comments fedilink hide all child comments
[–] SuddenlyBlowGreen@lemmy.world 6 points 2 years ago (1 child) What makes you dislike docker? At least from a development perspecrive, it's really convenient, especially when paired with a CICD system and container registry. permalink fedilink source parent hideshow 2 child comments replies: [–] 9488fcea02a9@sh.itjust.works 2 points 2 years ago (3 children) I tried it once and it rewrote all my firewall rules without telling me permalink fedilink source parent hideshow 6 child comments replies: [–] moonpiedumplings@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) Yeah that's a gripe of mine. Thankfully podman doesn't do that. Docker also sometimes breaks lxd and libvirt networking by changing the default forward policy from accept to drop. permalink fedilink source parent hideshow 2 child comments replies: [–] saiarcot895@programming.dev 1 point 2 years ago (1 child) I think podman by default does do that, but it's easy to disable almost all of it, at least. permalink fedilink source parent hideshow 2 child comments replies: [–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent [–] Toribor@corndog.social 2 points 2 years ago (1 child) Sounds like you were using Docker Desktop on Windows maybe? It's... pretty meh. But Docker on Linux is phenomenal. Docker on Windows is mostly just a way to make it accessible to developers stuck on Windows. permalink fedilink source parent hideshow 2 child comments replies: [–] 9488fcea02a9@sh.itjust.works 1 point 2 years ago Nope. Debian permalink fedilink source parent [–] SuddenlyBlowGreen@lemmy.world 1 point 2 years ago Damn. Yeah, that would make me dislike it too. permalink fedilink source parent
[–] 9488fcea02a9@sh.itjust.works 2 points 2 years ago (3 children) I tried it once and it rewrote all my firewall rules without telling me permalink fedilink source parent hideshow 6 child comments replies: [–] moonpiedumplings@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) Yeah that's a gripe of mine. Thankfully podman doesn't do that. Docker also sometimes breaks lxd and libvirt networking by changing the default forward policy from accept to drop. permalink fedilink source parent hideshow 2 child comments replies: [–] saiarcot895@programming.dev 1 point 2 years ago (1 child) I think podman by default does do that, but it's easy to disable almost all of it, at least. permalink fedilink source parent hideshow 2 child comments replies: [–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent [–] Toribor@corndog.social 2 points 2 years ago (1 child) Sounds like you were using Docker Desktop on Windows maybe? It's... pretty meh. But Docker on Linux is phenomenal. Docker on Windows is mostly just a way to make it accessible to developers stuck on Windows. permalink fedilink source parent hideshow 2 child comments replies: [–] 9488fcea02a9@sh.itjust.works 1 point 2 years ago Nope. Debian permalink fedilink source parent [–] SuddenlyBlowGreen@lemmy.world 1 point 2 years ago Damn. Yeah, that would make me dislike it too. permalink fedilink source parent
[–] moonpiedumplings@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) Yeah that's a gripe of mine. Thankfully podman doesn't do that. Docker also sometimes breaks lxd and libvirt networking by changing the default forward policy from accept to drop. permalink fedilink source parent hideshow 2 child comments replies: [–] saiarcot895@programming.dev 1 point 2 years ago (1 child) I think podman by default does do that, but it's easy to disable almost all of it, at least. permalink fedilink source parent hideshow 2 child comments replies: [–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent
[–] saiarcot895@programming.dev 1 point 2 years ago (1 child) I think podman by default does do that, but it's easy to disable almost all of it, at least. permalink fedilink source parent hideshow 2 child comments replies: [–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent
[–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent
[–] Toribor@corndog.social 2 points 2 years ago (1 child) Sounds like you were using Docker Desktop on Windows maybe? It's... pretty meh. But Docker on Linux is phenomenal. Docker on Windows is mostly just a way to make it accessible to developers stuck on Windows. permalink fedilink source parent hideshow 2 child comments replies: [–] 9488fcea02a9@sh.itjust.works 1 point 2 years ago Nope. Debian permalink fedilink source parent
[–] SuddenlyBlowGreen@lemmy.world 1 point 2 years ago Damn. Yeah, that would make me dislike it too. permalink fedilink source parent