Auch bekannt als:

  • 0 Posts
  • 3 Comments
Joined 6 months ago
cake
Cake day: June 22nd, 2024

help-circle

  • There are different ways to run container. I run them via podman-systemd services. For me, the main benefits of running a container over an executable on the host system are the following:

    • not everything I want to self-host is packaged for my distro, but they all have container images available
    • operating system updates are independent from application updates, application updates are independent from each other. One broken dependency won’t kill my entire stack
    • all containers are running without root privileges and with restricted access to the host system. One vulnerable application won’t give access to my entire system
    • I can have all my config in one directory (~/.config/containers/systemd/), instead of having them across multiple /etc/* directories
    • volume bind mounts make it easy to declaratively mount any folder anywhere, so I can keep my directory structure how I like it
    • cockpit offers a great UI to visualize my hosted applications