I'm not sure why, but the original of this email was bounced by the server. I'm sending it again with my answer. -------- Forwarded Message -------- Subject: Newbie Question Date: Sat, 10 Oct 2020 05:04:01 +0000 From: Jonathan Aquilina <jaquilina@eagleeyet.net> To: podman-bounces@lists.podman.io <podman-bounces@lists.podman.io> Good Morning, I have a quick question regarding podman, is it meant to be a replacement for docker and or Kubernetes, or does it work hand in hand with them? Regards, Jonathan Simple answer Yes. Podman can work alongside of Docker or it can replace it. As noted on the podman.io website: Simply put: *alias docker=podman*. We also work with Kubernetes with these commands: http://docs.podman.io/en/latest/markdown/podman-generate-kube.1.html http://docs.podman.io/en/latest/markdown/podman-play-kube.1.html But for a richer Kubernetes environment, you might want to look at CRI-O https://cri-o.io/ and it's GitHub repo (https://github.com/cri-o/cri-o). Others more involved than I with the Kubernetes side of things will likely have more insight. Welcome to the Podman community! t
Morning Tom, Thanks for this and the welcome. Just a question what advantages does podman have over docker and other container platforms? Is there additional security that podman offers that the other platforms don’t? Regards, Jonathan From: Tom Sweeney <tsweeney@redhat.com> Sent: 11 October 2020 00:00 To: podman mailing list <podman@lists.podman.io> Subject: [Podman] Newbie Question I'm not sure why, but the original of this email was bounced by the server. I'm sending it again with my answer. -------- Forwarded Message -------- Subject: Newbie Question Date: Sat, 10 Oct 2020 05:04:01 +0000 From: Jonathan Aquilina <jaquilina@eagleeyet.net><mailto:jaquilina@eagleeyet.net> To: podman-bounces@lists.podman.io<mailto:podman-bounces@lists.podman.io> <podman-bounces@lists.podman.io><mailto:podman-bounces@lists.podman.io> Good Morning, I have a quick question regarding podman, is it meant to be a replacement for docker and or Kubernetes, or does it work hand in hand with them? Regards, Jonathan Simple answer Yes. Podman can work alongside of Docker or it can replace it. As noted on the podman.io website: Simply put: alias docker=podman. We also work with Kubernetes with these commands: http://docs.podman.io/en/latest/markdown/podman-generate-kube.1.html http://docs.podman.io/en/latest/markdown/podman-play-kube.1.html But for a richer Kubernetes environment, you might want to look at CRI-O https://cri-o.io/ and it's GitHub repo (https://github.com/cri-o/cri-o). Others more involved than I with the Kubernetes side of things will likely have more insight. Welcome to the Podman community! t
But for a richer Kubernetes environment, you might want to look at CRI-O https://cri-o.io/ and it's GitHub repo (https://github.com/cri-o/cri-o). Others more involved than I with the Kubernetes side of things will likely have more insight.
The built-in Docker support in Kubernetes (the so called "dockershim") is getting deprecated - in favor of the standard interfaces such as CRI (for runtime) and CNI (for network): https://kubernetes.io/blog/2016/12/container-runtime-interface-cri-in-kubern... https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/1985-re... So there it will be between "containerd" (supported by docker/moby for some features) and "cri-o" (supported by podman for some features), as two available choices for the CRI: * https://kubernetes.io/docs/setup/production-environment/container-runtimes/#... * https://kubernetes.io/docs/setup/production-environment/container-runtimes/#... Both are available out-of-the-box in minikube, by using the --container-runtime start parameter: --container-runtime string The container runtime to be used (docker, cri-o, containerd). You can also connect directly to them, but there is nothing in Kubernetes itself that requires this... (it is a minikube feature, with the docker-env and podman-env commands, to set the environment) The plan is to make docker a socket-activated supporting service for containerd (not a default daemon), and to make podman a socket-activated supporting service for cri-o (same)... * https://github.com/kubernetes/minikube/issues/9230 * https://github.com/kubernetes/minikube/issues/9232 We mostly use docker/podman when it comes to doing a "load" from an archive in the cache, or doing a "build" from a Dockerfile/Containerfile to an image. The rest is done by crictl. /Anders PS. Currently minikube still use the legacy docker-2376 and podman-varlink protocols though. But eventually both of them will be replaced, by using the unix sockets over a ssh connection...
participants (3)
-
Anders F Björklund -
Jonathan Aquilina -
Tom Sweeney