[raesene9]

From what little I've looked at podman, the "no daemon, rootless" story isn't quite as straightforward as it might appear.

For starters, you couldn't expose ports as a standard user running podman last time I used it . Also every container got it's own conmon process, so there's still an overhead, it's just done differently.

[jka]

Fair point re: conmon, and yep, even in the strictest sense of the word, it is a daemon now that I read up on how it executes the container.

I guess it's better to say that only a monitoring daemon is required with this setup (rather than all of the additional daemon services that docker provides).

Re: rootless podman, it looks like there's a good resource to track progress here: https://github.com/containers/libpod/blob/v1.6.2/rootless.md - that must be a common ask, could be interesting to track.

(I'm definitely guilty of being overoptimistic about these tools, but do hope they improve because the principles behind them seem very sound)