In this episode, I had the pleasure of continuing to talk with Arne Blankerts about one of my favourite topics: containers. We talked about his misgivings with Docker, his love of Podman, some of the history of containers and container plumbing in the Linux kernel, how Docker's architecture can lead to security issues, and so much more.

If you're in to containers in any way, or are thinking of getting in to them, this episode is for you!

Some key takeaways are:

• Podman Compose is almost an equivalent to Docker Compose
• Podman is virtually a drop-in replacement for Docker
• Podman doesn't require a daemon and doesn't require root
• Isolated processes just make sense
• The kernel can't directly control containers when using Docker

Links

• Podman
• Kubernetes
• FreeBSD Jails
• chroot
• Introduction to Control Groups (Cgroups)
• Demystifying containers, part 1: Kernel Space
• Linux Containers (LXC)
• Podman Compose
• Laravel - The PHP Framework for Web Artisans
• Dan Walsh (Twitter, Blog)
• Podman in Action, by Dan Walsh
• Docker security issues
• Confoo.ca
• The future is now: Replacing Docker with Podman
• Honey, I shrunk the Container!

Guests: Arne Blankerts (@arneblankerts).

Hosted By: Matthew Setter.

Thanks for tuning in to Free the Geek. If you'd like to be a guest on the podcast or know someone who'd make a great guest, email me: matthew[at]matthewsetter.com. This podcast is produced by Matthew Setter for the Web Dev With Matt podcast network.

Support
If you want to support the show, you can always buy me a coffee. I'd greatly appreciate your financial support.