Reading up on Podman
3 deep · digging since may 06
- SQLite in Production with Built-In Litestream Replication – OpenRun
OpenRun integrates Litestream to provide automatic SQLite database backup and restore on Docker, Podman, and Kubernetes without requiring app changes.
- kern: fast rootless container sandbox and virtual resource runtime
Kern is a 1.52 MB, daemonless, rootless container runtime that starts kernel-enforced sandboxes from OCI images in ~3.5 ms, with Python/Node SDKs and MCP server for AI-generated code.
- Podman rootless containers and the Copy Fail exploit
Podman's rootless containers limit the blast radius of the Copy Fail exploit by using user namespaces to map container root to an unprivileged host user, preventing container escape.