Post by @phileas@infosec.exchange

2026-05-06 21:11 UTC

did u know, #systemd can now run #docker images natively, kinda it&#39;s really nice just needs two commands: sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine sudo systemd-nspawn -M alpine /usr/bin/env sh -l thank you @pid_eins, I&#39;ve spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

Replies (7)

@kouhai@social.treehouse.systems 2026-05-07 05:41

@phileas@infosec.exchange @pid_eins@mastodon.social oh hey, a podman killer

Open ##2212266
@ewjoachim@piaille.fr 2026-05-07 06:03

@phileas@infosec.exchange @pid_eins@mastodon.social at a very small scale, I’ve been having a blast recently deploying containers in systemd using podman and quadlets. It even has ansible support.

Open ##2212275
@mattiasb@mastodon.xyz 2026-05-07 08:17

@phileas@infosec.exchange Do you know which version this was released in?

Open ##2212277
@makepost@mastodon.art 2026-05-07 10:05

@phileas@infosec.exchange @pid_eins@mastodon.social Would be cool if there were a systemd-compose counterpart :artaww:

Open ##2212288
@TheStroyer@mastodon.social 2026-05-07 13:57

@phileas@infosec.exchange @pid_eins@mastodon.social yet another way to sandbox an application. There are so many options that I don't know what to choose for sandboxing AI agent frameworks, like Pi

Open ##2212291
@tivasyk@awawa.club 2026-05-07 14:32

@phileas@infosec.exchange it’s so cool it reminds me that i really should try any other init system that is not this kitchen sink and switch now :-/ i’ve been too lazy for too long; another delay and it may be too late :-)

Open ##2212298
@zvyn@chaos.social 2026-05-07 16:17

@phileas@infosec.exchange @pid_eins@mastodon.social I've also heard good things about quadlet (my very linmited experience is also positive, but I only toyed around so far): https://www.redhat.com/en/blog/quadlet-podman

Open ##2212301