guys, real talk now, our ecosystem leans way too hard on Docker when we should be pushing Podman a lot more. If we're really serious about security (and we definitely should be lol), we _must_ run on Podman whenever possible. You know, _both_ run the same OCI-compatible containers, but Podman's _daemonless_, _rootless_ setup makes it way lighter, safer, and just cleaner overall (try it yourself!). It fits so naturally with k8s, avoids the privileged daemon bullshit, and gives you actual control over your env. Sure, Docker still wins on convenience & polish (which we shouldn't care too much tho), but if we do care about security & long-term sanity, Podman should be the default. Even Gentoo calls it out. https://x.com/pcaversaccio/status/1982021816223674376(sudo rm -rf --no-preserve-root /)