#podman #sre #devops #kubernetes #docker #container #controlplan #redhat #centos8
Podman is sometimes considered safer than Docker because it does not require a separate daemon to run containers, which reduces the attack surface for potential security vulnerabilities. It also has better support for running containers as non-root users, which can improve security.
Podman (the POD manager) is an open source tool for developing, managing, and running containers on your Linux® systems. Originally developed by Red Hat® engineers along with the open source community, Podman manages the entire container ecosystem using the libpod library.
You need to install Podman instead of Docker. You do not need to start or manage a daemon process like the Docker daemon. The commands that you use with Docker will be the same for Podman. Images of Docker is compatible with Podman.
Podman is native to Kubernetes, whereas Docker also works with Docker Swarm. Docker includes all the functionality you need for many container-related tasks. Podman is modular and lets you experiment with different tools for different purposes.
podman machine is a set of subcommands that manage Podman's virtual machine. Podman on MacOS and Windows requires a virtual machine. This is because containers are Linux - containers do not run on any other OS because containers' core functionality are tied to the Linux kernel.
Podman is fully open-source, which enables large adoption of the tool and allows for fast-paced improvements based on community requests and efforts. This was demonstrated in 2021 when the Podman machine was integrated into the Podman source code.