you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 years ago (1 child)

I think podman by default does do that, but it's easy to disable almost all of it, at least.

  • source
  • parent
  • hideshow 2 child comments
  • Nope, I just tested and the rootful podman service doesn't touch any iptables/firewall rules.

    It uses what is called a "CNI", container network interface, to manage container networking rather than just overwriting all the iptables rules like docker does.

  • source
  • parent