Docker
Platform for building, shipping and running applications in Linux containers.
Liked for keeping dev dependencies off the host machine,123 for sandboxing AI coding agents,45 and for simple self-hosting and deployment.678 The most common complaint is a poor experience on macOS,91011 followed by a root daemon and firewall changes that create security footguns.12131415
Why people recommend it
Self-hosting · 3
Commenters use it, often with Compose or systemd, as an easy way to run self-hosted services and small apps.
“install docker, and run it”
“it’s still the cheapest and easiest way to deploy small to not so small apps DIY style.”
Show 1 more
“What I use and really recommend is using systemd +/- docker.”
Host isolation · 3
Keeps apps, test databases and dependencies from cluttering or conflicting on the host.
“I always felt uneasy installing various things onto my host and docker just solved that uneasiness.”
“Docker starting test DBS, getting apps quickly to run without setting up all deps on my system.”
Show 1 more
“docker isolation is nice just as a management boundary.”
Agent sandboxing · 3
Used as a sandbox for AI coding agents such as Codex and Claude.
“I chose to build straight on top of docker and agents are simply fully sandboxed by default.”
“I use nixos and use a little wrapper that wraps Codex CLI in Docker.”
Show 1 more
“I do everything inside Docker containers”
Reproducibility · 3
Gives consistent, predictable build and runtime environments for teams and CI.
“Put it in a docker container if you want to ensure it is perfectly reproducible.”
“I use it always to set up my dev environment so that the team can have a consistent environment to work on.”
Show 1 more
“Vanilla docker/buildkit works just fine”
Works everywhere · 3
Reported to install easily and work out of the box, including on older LTS distros.
“Docker works out of the box everywhere.”
“I'm able to easily run the latest version of Docker. They care about my use case, make my life as a sysadmin easier, so I use their software.”
Show 1 more
“Imho, yes.”
Ecosystem · 3
Containers are seen as the de facto deployment unit, with a lot of tooling built around them.
“the Linux container had become the de facto standard unit of deployment. There is so much tooling written under that assumption”
“I always felt uneasy installing various things onto my host and docker just solved that uneasiness.”
Show 1 more
“we quickly started to shift to Docker”
Caveats and dissent
macOS experience · 3
Several commenters call Docker on Mac slow or painful, and one switched to a Linux laptop over it.
“Docker Mac expirience is pretty bad especially the x86 is just painful”
“I switched to a Linux laptop because I couldn't stand the experience of working with Docker on macos.”
Show 1 more
“We’ve tried to stay away from Docker as much as we can though because of the still pretty bad experience on Mac.”
Root security · 3
The rootful daemon ignores Unix permissions and raises security concerns.
“Why doesn't docker respect unix filesystem permissions? I use docker on a shared server, i can delete docker images of other users. This is bonkers.”
Show 1 more
“taking glaring security holes in a single app (docker) & transforming them into glaring security holes in an entire OS”
Firewall rules · 2
Docker silently rewrites iptables rules, which can break custom networking.
“it will silently overwrite iptables rules and punch holes in your firewall.”
Fiddly to manage · 3
Some find it hard to manage outside a day job or a constant fight for advanced setups.
“Docker is a nightmare to manage if it's not part of your day job to do so.”
“But you kind of have to fight docker the whole way.”
Show 1 more
“though docker has its frustrating behaviours”
Disk space · 1
One user reports running out of disk space and needing frequent reboots to reclaim it.
“now with Docker I have to restart regularly as I frequently get notes about 'no more disk space'”
Docker Hub logins · 1
A paying user complains that OAuth logins expire within hours, which breaks image fetching for CI.
“my oAuth logins to Docker expire within hours now”
Often compared with
14 moved from Docker to Podman
2 moved from Docker to Firecracker
1 moved from Docker to Dagger
Who recommends it in their own words
From the makers not counted in the ranking
“So now Docker is this cool experience I share with lots of people around the world”
Threads where it came up
- Docker is weird 9 mentions
- Ask HN: Who wants to be hired? (August 2026) 5 mentions
- Ask HN: Should I learn Docker to deploy my app in VPS? 5 mentions
- What I self-host 4 mentions
- Podman v6.0.0 4 mentions
- Omarchy: Any User Process Can Escalate to Root 3 mentions
Data: docker.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 48
“I can put most software-development stuff into a rootless Docker container to deter supply-chain attacks”
“I don't think they're a great solution, as it complicates software distribution.”
“I still prefer building code through Docker but that's about all I use it for.”
“Rootless docker, last I used it, behaved sensibly”
“Docker takes a wrecking ball to the firewall rules”
“we quickly started to shift to Docker”
“Docker is a service daemon running as root”
“Why doesn't docker respect unix filesystem permissions? I use docker on a shared server, i can delete docker images of other users. This is bonkers.”
“the Linux container had become the de facto standard unit of deployment. There is so much tooling written under that assumption”
“I always felt uneasy installing various things onto my host and docker just solved that uneasiness.”
“I chose to build straight on top of docker and agents are simply fully sandboxed by default.”
“The agents are running inside a docker container”
“you can't act like k8s and docker are overkill and fiddly simply because you haven't found a need for them yet.”
“i love docker and exposing my services publicly”
“docker isolation is nice just as a management boundary.”
“lots of things started becoming available in Docker”
“Technologies: Opencode / Codex / Jcode, Tmux, Docker”
“I use nixos and use a little wrapper that wraps Codex CLI in Docker.”
“So much software I love keeps doing this. redis, docker, now bitwarden.”
“Agents take more time than building Docker images.”
“hosting media to friends and family on Docker”
“I was tired of docker slowing my Mac down with some really heavy client projects”
“For me I went Docker and Kubernetes.”
“The Docker containers keep each session isolated”
“running in a docker container”
“Docker works out of the box everywhere.”
“taking glaring security holes in a single app (docker) & transforming them into glaring security holes in an entire OS”
“it will silently overwrite iptables rules and punch holes in your firewall.”
“And docker if I need isolation for CI/CD.”
“Put it in a docker container if you want to ensure it is perfectly reproducible.”
Location: Rio de Janeiro, Brazil (UTC−3) Remote: Yes Willing to relocate: Yes Technologies: TypeScript (strict) · React · Next.js · Node.js · Python · SQL/PostgreSQL · Supabase · Docker · GitHub Actions/CI · Azure · LLM APIs (Anthropic, OpenAI) · RAG · agent architectures · Cursor/Claude Code in the daily loop Résumé/CV: https://sidneyferreira.com - https://aifield.tech — https://github.com/sidfer Email: ferreirasidn
“Technologies: Linux, JavaScript/Node.js, Git, Docker”
“Redis, Celery, Docker”
“Most of the stuff I use is free and excellent.”
“OpnSense router -> Traefik -> Docker container.”
“run Docker daily”
“C++., Docker, FreeBSD”
“Yeah, I use Docker to compile Rust, but it's pretty fast”
“As a developer, I use docker/podman. Works great.”
“self-hosting Immich via Docker on Raspberry Pi 4”
“What I use and really recommend is using systemd +/- docker.”
“Docker Mac expirience is pretty bad especially the x86 is just painful”
“I switched to a Linux laptop because I couldn't stand the experience of working with Docker on macos.”
“I do everything inside Docker containers”
“We’ve tried to stay away from Docker as much as we can though because of the still pretty bad experience on Mac.”
“install docker, and run it”
“Docker starting test DBS, getting apps quickly to run without setting up all deps on my system.”
“it’s still the cheapest and easiest way to deploy small to not so small apps DIY style.”