Comment on Rootless docker and symlink to docker.sock security issues
Guadin@k.fe.derate.me 12 hours ago Thanks for the answer.
- Not really. I just never looked into podman and knew Docker already (as in, I can create container with docker compose).
- Running Patchmon in Docker does not work, it's the patchmon-agent to update the host running docker. So it needs access to apt on the host.
- Perfect, it shows as root but the user owns the original .sock.
- Will not do.
- Didn't think of that. Not a problem now but it could be in the feature.
groet@feddit.org 12 hours ago
Podman is pretty mutch a drop in replacement for docker but it runs in user context instead if root.
All docker commands work with podman by just replacing the name including podman compose.
(You do have to specify docker.io as a repository if you want to pull images from docker hub but that is literally the only difference In usage I ever noticed)