▲ 66 ▼ LXD: Containers for Human Beings (secluded.site) submitted 2 years ago by Voyager@psychedelia.ink to c/linux@lemmy.ml 25 comments fedilink hide all child comments
[–] moonpiedumplings@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) Yeah that's a gripe of mine. Thankfully podman doesn't do that. Docker also sometimes breaks lxd and libvirt networking by changing the default forward policy from accept to drop. permalink fedilink source parent hideshow 2 child comments replies: [–] saiarcot895@programming.dev 1 point 2 years ago (1 child) I think podman by default does do that, but it's easy to disable almost all of it, at least. permalink fedilink source parent hideshow 2 child comments replies: [–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent
[–] saiarcot895@programming.dev 1 point 2 years ago (1 child) I think podman by default does do that, but it's easy to disable almost all of it, at least. permalink fedilink source parent hideshow 2 child comments replies: [–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent
[–] moonpiedumplings@programming.dev 1 point 2 years ago Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules. It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does. permalink fedilink source parent