Comment

Comment by righthand

This was not always true and running rootless has been a benefit of Podman for a long time. Docker also does not run rootless by default afaik, thus making the attack surface greater by default.

The other main improvement of Podman over Docker is that Podman is daemonless and therefor is incredibly lightweight and portable.

parent righthand 5 months ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton