Podman Stacks

The majority of the applications we deploy and manage use a dedicated virtual machine per tenant, and run application services inside rootless Podman containers. We prefer Podman to Docker not only for the rootless support, but also to remove the attack surface of the Docker daemon. We use Quadlets to configure the application services, which are then managed at runtime by systemd.

• Anatomy of a Podman Stack
• Configuring networks