Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

switch from docker to podman #319

Open
Xyz00777 opened this issue Feb 23, 2025 · 0 comments
Open

switch from docker to podman #319

Xyz00777 opened this issue Feb 23, 2025 · 0 comments

Comments

@Xyz00777
Copy link

Is your feature request related to a problem? Please describe.
Yes. I would like Kasm to move away from Docker altogether and exclusively support Podman as the container backend. While Docker is workable for compliance and security when configured properly, Podman’s rootless, daemonless approach reduces the complexity and risk of misconfiguration (like running it as root and not rootless), providing a simpler and more inherently secure foundation for containerized environments.

Describe the solution you'd like
Ditch Docker and use Podman: Completely transition Kasm to use Podman.
Rootless by Default: Embrace Podman’s rootless model to lower the risks tied to privilege escalations.

Describe alternatives you've considered
Continuing with Docker: While still viable, Docker introduces additional layers of complexity, such as reliance on a daemon and a higher risk from root-level operations.
Supporting Both Docker and Podman: This might split the focus and maintenance effort, potentially slowing down improvements and security enhancements.

Additional context
By implementing Podman, Kasm can provide a more robust, security-focused containerization platform for organizations/and self host users. Rootless Podman helps mitigate the impact of misconfigurations and reduces the overall attack surface, aligning with the trend toward zero-trust, compliance-centric deployments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant