[eriksjolund]

Podman has a feature that Docker does not yet have: Socket activation of containers. I created a proof-of-concept demo of how to run an nginx container with rootless Podman and socket activation.

Using socket activation has some security and performance advantages:

- Native network performance over the socket-activated socket

- Possibility to restrict the network in the container

- Possibility to at the same time restrict the network in Podman and the OCI runtime

- The source IP address is preserved

- Podman installation size can be reduced