Larvitz  Apr 5

Running Podman  in production for years now, and I don't miss the Docker daemon one bit.

I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

I cover:
- Real secrets management
- Auto-updates via systemd timers
- The Docker compatibility layer

This is the guide I wish I had when making the switch.

Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

#Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

Podman in Production: Quadlets, Secrets, Auto-Updates, and Docker Compatibility

An opinionated production-ops guide to Podman on Linux servers - why I prefer it over Docker, how Quadlets replace Compose files, and practical patterns from real deployments including secrets mana...

Larvitz Blog
Show threadStefan K.
@Larvitz Great guide, I started moving my services from docker compose to podman thanks to you. One question, don't you need to add `Internal=true` to /etc/containers/systemd/forgejo-backend.network to stop traffic to the Internet or did you block access somewhere else?
Apr 14 at 4:54pmWeb
Show threadLarvitz  1d ago
@stadtkind2 I control the traffic via firewalld (which essentially is using nftables in the Linux kernel)