Mirrors/h4cker
2
0
Fork 0
mirror of https://github.com/The-Art-of-Hacking/h4cker synced 2024-11-21 18:33:03 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update podman_vs_docker.md

Browse source
This commit is contained in:
Omar Santos 2022-06-08 10:02:50 -04:00 committed by GitHub
parent efdf4407ab
commit a66479b143
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
docker-and-k8s-security/podman_vs_docker.md
View file

@ -4,7 +4,7 @@
- Podman has a daemon-less architecture which means it can run containers under the user starting the container. - Podman has a daemon-less architecture which means it can run containers under the user starting the container.
- Docker has a client-server logic mediated by a daemon; Podman does not need the mediator. - Docker has a client-server logic mediated by a daemon; Podman does not need the mediator.
- Podman allows for non-root privileges for containers. - Podman allows for non-root privileges for containers.
- Rootless containers are considered safer than containers with root privileges - Rootless containers are considered safer than containers with root privileges
## Podman Rootless? ## Podman Rootless?
@ -15,11 +15,11 @@
- Without a daemon, Podman needs another tool to manage services and support running containers in the background. - Without a daemon, Podman needs another tool to manage services and support running containers in the background.
- Systemd creates control units for existing containers or to generate new ones. - Systemd creates control units for existing containers or to generate new ones.
- Systemd can also be integrated with Podman allowing it to run containers with systemd enabled by default, without any modification. - Systemd can also be integrated with Podman allowing it to run containers with systemd enabled by default, without any modification.
- By using systemd, vendors can install, run, and manage their applications as containers since most are now exclusively packaged and delivered this way. - By using systemd, vendors can install, run, and manage their applications as containers since most are now exclusively packaged and delivered this way.
## Building images ## Building images
- As a self-sufficient tool, Docker can build container images on its own.  - As a self-sufficient tool, Docker can build container images on its own. 
- Podman requires the assistance of another tool called Buildah, which expresses its specialized nature: it is made for running but not building containers on its own.![image](https://user-images.githubusercontent.com/1690898/172636340-a0963aab-eb27-46d6-ab47-f00c0d9aa680.png) - Podman requires the assistance of another tool called Buildah, which expresses its specialized nature: it is made for running but not building containers on its own.