4:59 p.m.
I'm not sure why, but the original of this email was bounced by the
server. I'm sending it again with my answer.
-------- Forwarded Message --------
Subject: Newbie Question
Date: Sat, 10 Oct 2020 05:04:01 +0000
From: Jonathan Aquilina <jaquilina(a)eagleeyet.net>
To: podman-bounces(a)lists.podman.io <podman-bounces(a)lists.podman.io>
Good Morning,
I have a quick question regarding podman, is it meant to be a
replacement for docker and or Kubernetes, or does it work hand in hand
with them?
Regards,
Jonathan
Simple answer Yes.
Podman can work alongside of Docker or it can replace it. As noted on
the podman.io website:
Simply put: *alias docker=podman*.
We also work with Kubernetes with these commands:
http://docs.podman.io/en/latest/markdown/podman-generate-kube.1.html
http://docs.podman.io/en/latest/markdown/podman-play-kube.1.html
But for a richer Kubernetes environment, you might want to look at CRI-O
https://cri-o.io/ and it's GitHub repo
(https://github.com/cri-o/cri-o). Others more involved than I with the
Kubernetes side of things will likely have more insight.
Welcome to the Podman community!
t
11:52 p.m.
Morning Tom,
Thanks for this and the welcome.
Just a question what advantages does podman have over docker and other container
platforms? Is there additional security that podman offers that the other platforms
don’t?
Regards,
Jonathan
From: Tom Sweeney <tsweeney(a)redhat.com>
Sent: 11 October 2020 00:00
To: podman mailing list <podman(a)lists.podman.io>
Subject: [Podman] Newbie Question
I'm not sure why, but the original of this email was bounced by the server. I'm
sending it again with my answer.
-------- Forwarded Message --------
Subject:
Newbie Question
Date:
Sat, 10 Oct 2020 05:04:01 +0000
From:
Jonathan Aquilina <jaquilina@eagleeyet.net><mailto:jaquilina@eagleeyet.net>
To:
podman-bounces@lists.podman.io<mailto:podman-bounces@lists.podman.io>
<podman-bounces@lists.podman.io><mailto:podman-bounces@lists.podman.io>
Good Morning,
I have a quick question regarding podman, is it meant to be a replacement for docker and
or Kubernetes, or does it work hand in hand with them?
Regards,
Jonathan
Simple answer Yes.
Podman can work alongside of Docker or it can replace it. As noted on the podman.io
website:
Simply put: alias docker=podman.
We also work with Kubernetes with these commands:
http://docs.podman.io/en/latest/markdown/podman-generate-kube.1.html
http://docs.podman.io/en/latest/markdown/podman-play-kube.1.html
But for a richer Kubernetes environment, you might want to look at CRI-O https://cri-o.io/
and it's GitHub repo (https://github.com/cri-o/cri-o). Others more involved than I
with the Kubernetes side of things will likely have more insight.
Welcome to the Podman community!
t
6:03 a.m.
But for a richer Kubernetes environment, you might want to look at
CRI-O
https://cri-o.io/ and it's GitHub repo (https://github.com/cri-o/cri-o).
Others more involved than I with the Kubernetes side of things will likely
have more insight.
The built-in Docker support in Kubernetes (the so called "dockershim") is
getting deprecated - in favor of the standard interfaces such as CRI (for
runtime) and CNI (for network):
https://kubernetes.io/blog/2016/12/container-runtime-interface-cri-in-kub...
https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/1985...
So there it will be between "containerd" (supported by docker/moby for some
features) and "cri-o" (supported by podman for some features), as two
available choices for the CRI:
*
https://kubernetes.io/docs/setup/production-environment/container-runtime...
*
https://kubernetes.io/docs/setup/production-environment/container-runtime...
Both are available out-of-the-box in minikube, by using the
--container-runtime start parameter:
--container-runtime string The container runtime to be used (docker, cri-o,
containerd).
You can also connect directly to them, but there is nothing in Kubernetes
itself that requires this...
(it is a minikube feature, with the docker-env and podman-env commands, to
set the environment)
The plan is to make docker a socket-activated supporting service for
containerd (not a default daemon), and to make podman a socket-activated
supporting service for cri-o (same)...
* https://github.com/kubernetes/minikube/issues/9230
* https://github.com/kubernetes/minikube/issues/9232
We mostly use docker/podman when it comes to doing a "load" from an archive
in the cache, or doing a "build" from a Dockerfile/Containerfile to an
image. The rest is done by crictl.
/Anders
PS. Currently minikube still use the legacy docker-2376 and podman-varlink
protocols though.
But eventually both of them will be replaced, by using the unix sockets
over a ssh connection...
1286
days inactive
1287
days old
2 comments
3 participants
participants (3)
-
Anders F Björklund -
Jonathan Aquilina -
Tom Sweeney