Hacker News new | ask | show | jobs
by colordrops 1480 days ago
NixOS recently switched the default from docker to podman for containers. I don't know if it's Nix's configuration, or a problem with Podman itself, but it's unusable. The systemd service often hangs, creating networks errors out, the pod concept doesn't work great, requiring tearing down the whole group of containers to change port mappings, and it acts like a completely different system depending on the user running the container (though I suppose this last bit is supposedly a feature). Why isn't the list of images global to the machine? Perhaps I just don't get it yet.
3 comments

> Why isn't the list of images global to the machine?

Why would it be? Unless you jump through hoops, your music and photos aren't global to the machine; rootless containers just made containers fit in the traditional unix security model.

It's also happening on Debian. Podman seems to be also losing quite often network firewall configuration after killing containers that were using cached images so you are not able to access internet from containers (logs say its libpodman bug)
Podman always feel like software no one’s using in prod. There’s a lot of edge cases and bugs - particularly in the service control, user groups and ipv6 support