Articles
-
Why does SELinux container policy allow all Linux capabilities?
Read more: Why does SELinux container policy allow all Linux capabilities?I recently had a discussion in a container-selinux issue on why we allow certain capabilities by default for containers. The conversation is around DAC_OVERRIDE, a Linux capability which allows privileged processes, usually root, to ignore ownership and read/write permissions Discretionary Access Control (DAC). “As @wrabcak notes in Why do you see DAC_OVERRIDE SELinux denials?, In…
-
Podman v4.6 Introduces Podmansh: A Revolutionary Login Shell
Read more: Podman v4.6 Introduces Podmansh: A Revolutionary Login ShellIntroduction In the ever-evolving landscape of container technology, Podman’s latest version, v4.6.0, includes a feature that promises to be a game-changer for system administrators: Podmansh. A login shell that leverages Podman’s robust container management capabilities. Podmansh is set to redefine the way users interact with systems, while ensuring maximum security and control for administrators. Why…
-
Podman Performance: Root and Rootless
Read more: Podman Performance: Root and RootlessOne of the frequent complaints I hear from users moving to Podman is about performance. I’ve always found this confusing, as the Podman team has spent significant time and effort on improving our performance, and we are quite confident that our speed is broadly comparable to Docker. Indeed, an academic paper found that Podman was…
Subscribe
Sign up with your email address to receive updates by email from this website.
Latest news
- Podman/Buildah/Bootc/Podman Desktop AMA
- A Product Owner’s Life
- CNCF message from Maintainers
- Podman, Buildah, and Skopeo and the Cloud Native Computing Foundation
- Netavark and Aardvark-DNS v1.13 release
Categories
- Advanced (11)
- Announcement (23)
- Articles (3)
- Blog (6)
- Buildah (2)
- Community (4)
- New Feature (9)
- Newcomer (22)
- Podman (7)
- Podman Desktop (1)
- Releases (2)
- Skopeo (2)
- Tips and Tricks (19)
- Tutorials (2)
- Uncategorized (4)