grvn

Members
  • Posts

    1
  • Joined

  • Last visited

grvn's Achievements

Noob

Noob (1/14)

6

Reputation

  1. Docker Inc. was the first company to give the users an easy-to-use way to isolate processes through Linux namespaces, cgroups etc. But its implementation came with a lot to desire when it comes to security and stability. docker runs as a daemon with root access, which means that the daemon is a single point of failure and the security has been applied as an add-on. Since docker was released other companies has implemented similar kind of easy-to-use way of isolating processes, but have taken the lessons learned from Docker Inc.s' implementation and done more stable and secure implementations. The most common one being podman. Podman is created as a drop-in replacement for docker. You can create an alias "docker" that points to the podman binary and most things will work right out of the box. Unlike docker, podman doesn't use a daemon and can run completely rootless. By giving the users of unraid the ability to use rootless podman instead of docker, you will give the users a more secure and stable platform than the alternative while still giving use the ability to run containerized workloads.