Containers 101: Podman: A more secure way to run containers

Podman: A more secure way to run containers

Podman uses a traditional fork/exec model (vs. a client/server model) for running containers.

Before I get into the main topic of this article, Podman and containers, I need to get a little technical about the Linux audit feature.

What is audit?

The Linux kernel has an interesting security feature called audit. It allows administrators to watch for security events on a system and have them logged to the audit.log, which can be stored locally or remotely on another machine to prevent a hacker from trying to cover his tracks.

WHAT TO READ THIS WEEK

• Run containers on Linux without sudo in Podman Configure your system for rootless containers.


• How to SSH into a running container SSH is probably not the best way to run commands in a container; try this instead.


• 5 Podman features to try now Improve how you use containers with these new Podman features: --latest, --replace, --all, --ignore, and --tz.


• Cheat sheet: Podman basics This cheat sheet covers all of the commands that focus on images, containers, and container resources.