Best of ContainersMay 2025

  1. 1
    Article
    Avatar of spaceliftSpacelift·52w

    Podman vs. Docker: Containerization Tools Comparison

    Podman and Docker are two leading container platforms offering distinct features. Podman, developed by Red Hat, operates daemonless and supports rootless containers, enhancing security and system integration. Docker, highly popular for its ease of use, operates on a daemon-based architecture and has a rich ecosystem with broad third-party support. Both tools use OCI-compliant images allowing interoperability. While Docker's Swarm mode facilitates orchestration, Podman's design aligns closely with Kubernetes. Each tool is suitable for different use cases, with Podman excelling in secure, system-integrated environments and Docker being ideal for general development workflows.

  2. 2
    Article
    Avatar of hnHacker News·51w

    microsandbox/microsandbox: Self-Hosted Plaform for Secure Execution of Untrusted User/AI Code

    Microsandbox is a self-hosted platform for securely executing untrusted code using microVMs that boot in under 200ms. It provides true VM isolation with bulletproof security, supports OCI-compatible container images, and includes built-in MCP support for AI integration. The platform offers SDKs for Python, JavaScript, and Rust, along with project-based development workflows similar to package managers. Key use cases include AI code execution, data analysis, web browsing automation, and instant app hosting.

  3. 3
    Article
    Avatar of joindevopsDevOps·1y

    Most Starred DevOps Projects on Github

    The post highlights the most starred DevOps projects on GitHub as of April 2025. Key tools include Kubernetes for container orchestration, Grafana and Prometheus for monitoring, Ansible and Terraform for automation, Vault for security, Helm and Docker CLI for container management, and Jenkins for CI/CD. These tools are considered industry favorites and reflect real-world usage.

  4. 4
    Article
    Avatar of lobstersLobsters·1y

    Replacing Kubernetes with systemd

    The post discusses the author's journey of overusing Kubernetes and discovering how systemd combined with Podman can effectively manage containers with less resource consumption and complexity. While Kubernetes offers powerful automation, it's resource-heavy, especially in small setups. Podman's auto-update feature and integration with systemd services provide similar benefits with reduced CPU and memory usage, making it a more efficient solution. The author has successfully migrated services using this setup, resulting in improved performance and cost-effectiveness.

  5. 5
    Article
    Avatar of last9Last9·1y

    Essential Python Monitoring Techniques You Need to Know

    Python is widely used in various applications but requires careful performance monitoring due to its unique characteristics like the Global Interpreter Lock (GIL), dynamic typing, and memory management. Key metrics such as CPU usage, memory, response time, throughput, and error rates are essential for optimal performance. The post provides actionable insights for DevOps engineers and SREs to implement basic and advanced monitoring techniques using libraries like psutil, Prometheus, and OpenTelemetry, along with recommendations on tools for containerized environments.

  6. 6
    Article
    Avatar of joindevopsDevOps·51w

    Master Dockerfile Best Practices for Your Node.js App!

    Key Dockerfile optimization techniques for Node.js applications include strategic layer caching by copying package files before source code, pinning base image versions for stability, avoiding secrets in ENV variables, combining ENTRYPOINT and CMD for flexibility, and using multi-stage builds or Alpine images to minimize production image size.

  7. 7
    Article
    Avatar of communityCommunity Picks·1y

    Dokploy Blueprints

    The post introduces a variety of open-source alternatives to popular commercial products, covering platforms for databases, backend servers, knowledge management, web analytics, scheduling, CMS, and more. These tools offer functionality similar to Amazon RDS, Firebase, Calendly, and other management and analytics solutions, with the benefits of self-hosting and often reduced costs.

  8. 8
    Article
    Avatar of rhdevRed Hat Developer·52w

    How to simplify your multi-repo workflow with Podman

    The post offers a comprehensive tutorial on setting up a containerized development environment using Podman and dev containers. This solution addresses common environment-related issues faced when dealing with multiple components and repositories. By consolidating the workflow, new developers can easily acclimate to the project setup, enhancing productivity across the team.

  9. 9
    Article
    Avatar of detlifeData Engineer Things·52w

    From GIS to Data Engineering: Mastering Docker Fundamentals and Best Practices

    The post details a geospatial professional's transition into data engineering by mastering Docker fundamentals and best practices. It covers key aspects such as Docker setup, container security, resource management, and the use of Docker Compose for production-ready environments. It also highlights the importance of secure configuration and iteration in system design, using real-world examples of data pipeline implementation and containerization strategies.

  10. 10
    Article
    Avatar of infoqInfoQ·1y

    Spring Boot 3.5 Delivers Improved Configuration, Containers, and SSL, Shortens Free Support

    Spring Boot 3.5 introduces improved configuration, container support, and SSL enhancements. This release includes breaking changes and a shortened free support period of 13 months, with 72 months of paid support available. New features in related Spring projects and notable third-party dependency upgrades accompany the release. Future Spring Boot and Framework versions are slated for late 2025, aligning with new software baselines and support policies.

  11. 11
    Article
    Avatar of joindevopsDevOps·1y

    Kubernetes Deployment YAML - Extra Tips

    Kubernetes Deployment YAML files are crucial for safely managing rollouts and rollbacks, ensuring high availability with replicas, and auto-restarting stuck containers with livenessProbe. Pinning image versions and using readinessProbe can enhance traffic handling, while resource requests and limits guarantee and restrict usage respectively. Labels and selectors aid in organizing and controlling pods.