Whale and Seal, Two Playful Friends (Docker and PodMan)

on YouTube ↗44m

" summary

Compares Docker and Podman by highlighting real design differences and measured performance: Podman runs rootless by default using conmon and OCI runtimes, can generate systemd units and Kubernetes specs from running pods, and supports local image builds, while Docker follows its traditional daemon model. Benchmarks using an nginx image and ab show Podman variants (~95s) are noticeably slower than Docker (~60s), largely due to Podman’s user-space networking (slirp); the talk also shows CVE and Linux capability handling tradeoffs and limits.

AI-written summary · about

" chapters (13)

1. 0:00Podman and Docker intro
2. 2:22Origins and differences
3. 4:31Rootless security
4. 7:19Docker security issues
5. 10:07Podman advanced security
6. 13:37Performance tests
7. 16:01Root container risks
8. 19:15Systemd inside vs outside
9. 24:33Commands and compatibility
10. 27:25Docker Compose limits
11. 30:56Tool evolution
12. 33:47Linux distro deps
13. 35:35Conclusion & Q&A

" related talks

• 39mReplacing Docker with PodmanDaniel Walsh · DevConf.CZ 2019
• 39mPodman - create, run and secure Linux containersValentin Rothberg · Code Mesh LDN 2020
• 53mContainers without Daemons - Podman InternalsMatthew Heon · DevConf.CZ 2019
• 43mPodman, Buildah, Skopeo, and CRI-O A Year LaterUrvashi Mohnani, Sally Ann O'Malley · DevConf.CZ 2020
• 19mRootless containers with PodmanSteven Ellis · Linux.conf.au 2021 Systems Administration Miniconf
• 19mRootless containers with PodmanSteven Ellis · linux.conf.au 2021
• 41mPanel Discussion: Say Hi to the New Couple in the Town – DockerSlim and Kyverno – Making Your Kub...Mritunjay Sharma, Shuting Zhao, Ruhika Bulani · Cloud Native SecurityCon North America 2022
• 31mWhat’s under the hood of Docker?Janos Pasztor · DevOps Pro Europe 2019