<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
    <title>fosstog - containers</title>
    <subtitle>Free &amp; Open Source Photography</subtitle>
    <link rel="self" type="application/atom+xml" href="https://fosstog.com/tags/containers/atom.xml"/>
    <link rel="alternate" type="text/html" href="https://fosstog.com"/>
    <generator uri="https://www.getzola.org/">Zola</generator>
    <updated>2025-02-13T00:00:00+00:00</updated>
    <id>https://fosstog.com/tags/containers/atom.xml</id>
    <entry xml:lang="en">
        <title>Quadlets</title>
        <published>2025-02-13T00:00:00+00:00</published>
        <updated>2025-02-13T00:00:00+00:00</updated>
        
        <author>
          <name>
            
              ganthore
            
          </name>
        </author>
        
        <link rel="alternate" type="text/html" href="https://fosstog.com/blog/quadlets/"/>
        <id>https://fosstog.com/blog/quadlets/</id>
        
        <content type="html" xml:base="https://fosstog.com/blog/quadlets/">&lt;p&gt;&lt;strong&gt;TL;DR&lt;&#x2F;strong&gt;: Docker is out, &lt;a rel=&quot;noopener external&quot; target=&quot;_blank&quot; href=&quot;https:&#x2F;&#x2F;podman.io&#x2F;&quot;&gt;Podman&lt;&#x2F;a&gt; is in, and I’m running everything as a regular user through &lt;a rel=&quot;noopener external&quot; target=&quot;_blank&quot; href=&quot;https:&#x2F;&#x2F;docs.podman.io&#x2F;en&#x2F;latest&#x2F;markdown&#x2F;podman-systemd.unit.5.html&quot;&gt;systemd quadlets&lt;&#x2F;a&gt;. It took longer than it should have and I’d do it again.&lt;&#x2F;p&gt;
&lt;p&gt;Over the years I’ve been methodically replacing my Docker setup with Podman and migrating my containers to run at the user level through &lt;a rel=&quot;noopener external&quot; target=&quot;_blank&quot; href=&quot;https:&#x2F;&#x2F;docs.podman.io&#x2F;en&#x2F;latest&#x2F;markdown&#x2F;podman-systemd.unit.5.html&quot;&gt;systemd quadlets&lt;&#x2F;a&gt;. The pitch is simple: no daemon running as root, native systemd integration, and containers that behave like proper services instead of processes you’re just hoping stay alive.&lt;&#x2F;p&gt;
&lt;p&gt;The transition was not painless. Podman is not a drop-in replacement in every meaningful sense, and some tools have the Docker socket burned so deep into their DNA that migrating them felt like performing surgery with oven mitts. I got there eventually, with enough workarounds to wallpaper a small room.&lt;&#x2F;p&gt;
&lt;p&gt;Right now I’m focused on three things:&lt;&#x2F;p&gt;
&lt;ul&gt;
&lt;li&gt;Hardening security&lt;&#x2F;li&gt;
&lt;li&gt;Finding proper replacements for tools that were clearly designed with Docker in mind&lt;&#x2F;li&gt;
&lt;li&gt;Replacing my current DNS setup with something less likely to cause me grief at 2am&lt;&#x2F;li&gt;
&lt;&#x2F;ul&gt;
&lt;p&gt;The highlight so far: I packed &lt;a rel=&quot;noopener external&quot; target=&quot;_blank&quot; href=&quot;https:&#x2F;&#x2F;www.moddb.com&#x2F;mods&#x2F;the-specialists&quot;&gt;an old Half-Life 1 mod&lt;&#x2F;a&gt; into an Alpine image and got it connecting to the Steam network. Completely unnecessary. Worth every minute.&lt;&#x2F;p&gt;
</content>
        
    </entry>
</feed>
