podman build and docker build produce very different results #29850

rgaiacs · 2026-09-28T15:47:30Z

rgaiacs
Sep 28, 2026

I'm trying to migrate a project from docker build to podman build and I was surprise when podman build failed. I have a minimal working example that reproduces the behavior that I see.

Minimal working example

Containerfile

FROM docker.io/library/python:3.14.4-alpine3.23@sha256:ef097620baf1272e38264207003b0982285da3236a20ed829bf6bbf1e85fe3cb

RUN python -m pip config debug; python -m pip config list; python -m pip install -vvv --no-cache-dir cowsay django-gesis-web-frontend==1.5.0 --index-url https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple

Podman

I observe

podman build --progress plain -t mycowsay2 .

failing with

STEP 2/2: RUN python -m pip config debug; python -m pip config list; python -m pip install -vvv --no-cache-dir cowsay django-gesis-web-frontend==1.5.0 --index-url https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple
env_var:
env:
global:
  /etc/xdg/pip/pip.conf, exists: False
  /etc/pip.conf, exists: False
site:
  /usr/local/pip.conf, exists: False
user:
  /root/.pip/pip.conf, exists: False
  /root/.config/pip/pip.conf, exists: False
Using pip 24.0 from /usr/local/lib/python3.12/site-packages/pip (python 3.12)
Non-user install because site-packages writeable
Created temporary directory: /tmp/pip-build-tracker-kkywf6g8
Initialized build tracking at /tmp/pip-build-tracker-kkywf6g8
Created build tracker: /tmp/pip-build-tracker-kkywf6g8
Entered build tracker: /tmp/pip-build-tracker-kkywf6g8
Created temporary directory: /tmp/pip-install-n8b8hm3q
Created temporary directory: /tmp/pip-ephem-wheel-cache-iglmpjbu
Looking in indexes: https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple
1 location(s) to search for versions of cowsay:
* https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
Fetching project page and analyzing links: https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
Getting page https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
Found index url https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/
Starting new HTTPS connection (1): git.gesis.org:443
Incremented Retry for (url='/api/v4/projects/3271/packages/pypi/simple/cowsay/'): Retry(total=4, connect=None, read=None, redirect=None, status=None)
WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<pip._vendor.urllib3.connection.HTTPSConnection object at 0x7886546f7440>: Failed to establish a new connection: [Errno -2] Name does not resolve')': /api/v4/projects/3271/packages/pypi/simple/cowsay/
...
Removed build tracker: '/tmp/pip-build-tracker-kkywf6g8'
Error: building at STEP "RUN python -m pip config debug; python -m pip config list; python -m pip install -vvv --no-cache-dir cowsay django-gesis-web-frontend==1.5.0 --index-url https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple": while running runtime: exit status 1

Docker

When using Docker instead of Podman, i.e.

docker build --progress plain -t mycowsay2 .

I observed the expected successful run

#5 [2/2] RUN python -m pip config debug; python -m pip config list; python -m pip install -vvv --no-cache-dir cowsay django-gesis-web-frontend==1.5.0 --index-url https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple
#5 2.596 env_var:
#5 2.596 env:
#5 2.596 global:
#5 2.597   /etc/xdg/pip/pip.conf, exists: False
#5 2.597   /etc/pip.conf, exists: False
#5 2.597 site:
#5 2.597   /usr/local/pip.conf, exists: False
#5 2.599 user:
#5 2.600   /root/.pip/pip.conf, exists: False
#5 2.601   /root/.config/pip/pip.conf, exists: False
#5 3.599 Using pip 24.0 from /usr/local/lib/python3.12/site-packages/pip (python 3.12)
#5 3.600 Non-user install because site-packages writeable
#5 3.741 Created temporary directory: /tmp/pip-build-tracker-vyy0kwal
#5 3.743 Initialized build tracking at /tmp/pip-build-tracker-vyy0kwal
#5 3.743 Created build tracker: /tmp/pip-build-tracker-vyy0kwal
#5 3.744 Entered build tracker: /tmp/pip-build-tracker-vyy0kwal
#5 3.744 Created temporary directory: /tmp/pip-install-kyhuuz_z
#5 3.745 Created temporary directory: /tmp/pip-ephem-wheel-cache-kgrcm_5n
#5 3.796 Looking in indexes: https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple
#5 3.798 1 location(s) to search for versions of cowsay:
#5 3.798 * https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
#5 3.799 Fetching project page and analyzing links: https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
#5 3.801 Getting page https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
#5 3.803 Found index url https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/
#5 3.807 Starting new HTTPS connection (1): git.gesis.org:443
#5 4.221 https://git.gesis.org:443 "GET /api/v4/projects/3271/packages/pypi/simple/cowsay/ HTTP/1.1" 302 78
#5 4.224 Starting new HTTPS connection (1): pypi.org:443
#5 4.650 https://pypi.org:443 "GET /simple/cowsay/ HTTP/1.1" 200 1624
#5 4.652 Fetched page https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/ as application/vnd.pypi.simple.v1+json
#5 4.655   Found link https://files.pythonhosted.org/packages/8f/1f/37fbc878a11a2f2cdf680b74f4f8cd8cfbdf464779c6838a0914f2bcea3c/cowsay-1.0.tar.gz (from https://pypi.org/simple/cowsay/), version: 1.0
#5 4.662   Found link https://files.pythonhosted.org/packages/44/53/5ae386965f4fc73a06a868dc92a22e163e0b3a5c6fb449f67172746a912c/cowsay-3.0-py2.py3-none-any.whl (from https://pypi.org/simple/cowsay/), version: 3.0
#5 4.662   Found link https://files.pythonhosted.org/packages/23/8f/c83bbcccd897c7e7f07f36f8c24b483ef0788ab5b094b2ddceca7e98fba1/cowsay-3.0.tar.gz (from https://pypi.org/simple/cowsay/), version: 3.0
#5 4.663   Found link https://files.pythonhosted.org/packages/b7/65/38f31ef16efc312562f68732098d6f7ba3b2c108a4aaa8ac8ba673ee0871/cowsay-4.0-py2.py3-none-any.whl (from https://pypi.org/simple/cowsay/), version: 4.0
#5 4.664   Found link https://files.pythonhosted.org/packages/e8/15/fcfe67988ffd8e6256363174ca78fca86c927f8e6e618fd178f95a97d4d6/cowsay-4.0.tar.gz (from https://pypi.org/simple/cowsay/), version: 4.0
#5 4.665   Found link https://files.pythonhosted.org/packages/6b/b8/9f497fd045d74fe21d91cbe8debae0b451229989e35b539d218547d79fc6/cowsay-5.0.tar.gz (from https://pypi.org/simple/cowsay/), version: 5.0
#5 4.665   Found link https://files.pythonhosted.org/packages/73/56/7922bfc226ccd44221befb6b866aaa4da4170bc9d8b036ef0675ce0f1b53/cowsay-6.0-py2.py3-none-any.whl (from https://pypi.org/simple/cowsay/), version: 6.0
#5 4.665   Found link https://files.pythonhosted.org/packages/c7/01/40be54532d7bd37c99d849bbdd590f0135ce13183365df6f0e85c475ca71/cowsay-6.0-py3-none-any.whl (from https://pypi.org/simple/cowsay/), version: 6.0
#5 4.666   Found link https://files.pythonhosted.org/packages/7e/b5/e8e802ddc7f5219417dc7d7953eec81ffe48ad129b793f3040361e4aff89/cowsay-6.0.tar.gz (from https://pypi.org/simple/cowsay/), version: 6.0
#5 4.666   Found link https://files.pythonhosted.org/packages/f1/13/63c0a02c44024ee16f664e0b36eefeb22d54e93531630bd99e237986f534/cowsay-6.1-py3-none-any.whl (from https://pypi.org/simple/cowsay/) (requires-python:>=3.8), version: 6.1
#5 4.667 Skipping link: not a file: https://git.gesis.org/api/v4/projects/3271/packages/pypi/simple/cowsay/
#5 4.667 Given no hashes to check 10 links for project 'cowsay': discarding no candidates
#5 4.669 Collecting cowsay
#5 4.669   Obtaining dependency information for cowsay from https://files.pythonhosted.org/packages/f1/13/63c0a02c44024ee16f664e0b36eefeb22d54e93531630bd99e237986f534/cowsay-6.1-py3-none-any.whl.metadata
#5 4.670   Created temporary directory: /tmp/pip-unpack-n7k39xlg
#5 4.671   Starting new HTTPS connection (1): files.pythonhosted.org:443
#5 5.155   https://files.pythonhosted.org:443 "GET /packages/f1/13/63c0a02c44024ee16f664e0b36eefeb22d54e93531630bd99e237986f534/cowsay-6.1-py3-none-any.whl.metadata HTTP/1.1" 200 5581
#5 5.157   Downloading cowsay-6.1-py3-none-any.whl.metadata (5.6 kB)
#5 5.162   Created temporary directory: /tmp/pip-metadata-821d__3t
...
#5 41.96 Removed build tracker: '/tmp/pip-build-tracker-vyy0kwal'
#5 DONE 42.3s

#6 exporting to image
#6 exporting layers
#6 exporting layers 3.2s done
#6 exporting manifest sha256:e114cebc3813f9d8a586bdba9b09dc6896f83ae95f7a78599bbfd6f579ea6e1b 0.0s done
#6 exporting config sha256:5af5f7ec4aaa783e7a9c8790254670f34ae6d676901700455eb07af5bd051763 0.0s done
#6 exporting attestation manifest sha256:f2e4036449088caa9114c5c88b6ff4d5a4584aa8890185d39246bfcc85a50604 0.0s done
#6 exporting manifest list sha256:a1f7bfdf338fe8281844362368db213cecc144ef83063754d12ba9cdc099c3d0 0.0s done
#6 naming to docker.io/library/mycowsay2:latest
#6 naming to docker.io/library/mycowsay2:latest done
#6 unpacking to docker.io/library/mycowsay2:latest
#6 unpacking to docker.io/library/mycowsay2:latest 2.0s done
#6 DONE 5.4s

Question

Why is Podman behaving different than Docker in the above minimal working example?

Environment

Podman

podman info returns

podman info
host:
  arch: amd64
  buildahVersion: 1.43.2
  cgroupControllers:
  - cpu
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon-2.2.1-2.fc44.x86_64
    path: /usr/bin/conmon
    version: 'conmon version 2.2.1, commit: '
  cpuUtilization:
    idlePercent: 97.06
    systemPercent: 1.52
    userPercent: 1.42
  cpus: 8
  databaseBackend: sqlite
  distribution:
    distribution: fedora
    variant: wsl
    version: "44"
  emulatedArchitectures:
  - linux/arm
  - linux/arm
  - linux/arm64
  - linux/arm64
  - linux/arm64be
  - linux/loong64
  - linux/mips
  - linux/mips64
  - linux/mips64
  - linux/ppc
  - linux/ppc64
  - linux/ppc64le
  - linux/ppc64le
  - linux/riscv32
  - linux/riscv64
  - linux/riscv64
  - linux/s390x
  - linux/s390x
  eventLogger: journald
  freeLocks: 2034
  hostname: KOL22104
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 524288
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 524288
      size: 65536
  kernel: 6.18.33.2-microsoft-standard-WSL2
  linkmode: dynamic
  logDriver: journald
  memFree: 196009984
  memTotal: 8180596736
  networkBackend: netavark
  networkBackendInfo:
    backend: netavark
    defaultNetwork: podman
    dns:
      package: aardvark-dns-1.17.1-1.fc44.x86_64
      path: /usr/libexec/podman/aardvark-dns
      version: aardvark-dns 1.17.1
    package: netavark-1.17.2-1.fc44.x86_64
    path: /usr/libexec/podman/netavark
    version: netavark 1.17.2
  ociRuntime:
    name: crun
    package: crun-1.28-1.fc44.x86_64
    path: /usr/bin/crun
    version: |-
      crun version 1.28
      commit: 54f16ffbefcd022bf032af768b5c5ce075c18bfc
      rundir: /run/user/1000/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +WASM:wasmedge +JSON_C
  os: linux
  pasta:
    executable: /usr/sbin/pasta
    package: passt-0^20260728.gf8df3f1-2.fc44.x86_64
    version: |
      pasta 0^20260728.gf8df3f1-2.fc44.x86_64
      Copyright Red Hat
      GNU General Public License, version 2 or later
        <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
      This is free software: you are free to change and redistribute it.
      There is NO WARRANTY, to the extent permitted by law.
  remoteSocket:
    exists: true
    path: /run/user/1000/podman/podman.sock
  rootlessNetworkCmd: pasta
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /usr/share/containers/seccomp.json
    selinuxEnabled: false
  serviceIsRemote: false
  slirp4netns:
    executable: ""
    package: ""
    version: ""
  swapFree: 2142515200
  swapTotal: 2147483648
  uptime: 1h 13m 12.00s (Approximately 0.04 days)
  variant: ""
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries:
  docker-private.gesis.intra:
    Blocked: false
    Insecure: true
    Location: docker-private.gesis.intra
    MirrorByDigestOnly: false
    Mirrors: null
    Prefix: docker-private.gesis.intra
    PullFromMirror: ""
  search:
  - registry.fedoraproject.org
  - registry.access.redhat.com
  - docker.io
store:
  configFile: /home/raniere/.config/containers/storage.conf
  containerStore:
    number: 3
    paused: 0
    running: 3
    stopped: 0
  graphDriverName: overlay
  graphOptions: {}
  graphRoot: /home/raniere/.local/share/containers/storage
  graphRootAllocated: 1081101176832
  graphRootUsed: 147042508800
  graphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Supports shifting: "false"
    Supports volatile: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 556
  runRoot: /run/user/1000/containers
  transientStore: false
  volumePath: /home/raniere/.local/share/containers/storage/volumes
version:
  APIVersion: 5.8.4
  BuildOrigin: Fedora Project
  Built: 1782432000
  BuiltTime: Fri Jun 26 02:00:00 2026
  GitCommit: 5431df23c742e5edea35bef34eed696f4db0106b
  GoVersion: go1.26.4-X:nodwarf5
  Os: linux
  OsArch: linux/amd64
  Version: 5.8.4

Docker

docker info returns

Client:
 Version:    29.7.2
 Context:    default
 Debug Mode: false
 Plugins:
  agent: Docker AI Agent Runner (Docker Inc.)
    Version:  v1.119.0
    Path:     /usr/local/lib/docker/cli-plugins/docker-agent
  ai: Docker AI Agent - Ask Gordon (Docker Inc.)
    Version:  v1.30.0
    Path:     /usr/local/lib/docker/cli-plugins/docker-ai
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.36.0-desktop.1
    Path:     /usr/local/lib/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v5.3.1
    Path:     /usr/local/lib/docker/cli-plugins/docker-compose
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.47
    Path:     /usr/local/lib/docker/cli-plugins/docker-debug
  desktop: Docker Desktop commands (Docker Inc.)
    Version:  v0.4.3
    Path:     /usr/local/lib/docker/cli-plugins/docker-desktop
  dhi: CLI for managing Docker Hardened Images (Docker Inc.)
    Version:  v0.0.7
    Path:     /usr/local/lib/docker/cli-plugins/docker-dhi
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.31
    Path:     /usr/local/lib/docker/cli-plugins/docker-extension
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.4.0
    Path:     /usr/local/lib/docker/cli-plugins/docker-init
  mcp: Docker MCP Plugin (Docker Inc.)
    Version:  v0.43.3
    Path:     /usr/local/lib/docker/cli-plugins/docker-mcp
  model: Docker Model Runner (Docker Inc.)
    Version:  v1.2.6
    Path:     /usr/local/lib/docker/cli-plugins/docker-model
  offload: Docker Offload (Docker Inc.)
    Version:  v0.6.9
    Path:     /usr/local/lib/docker/cli-plugins/docker-offload
  pass: Docker Pass Secrets Manager Plugin (beta) (Docker Inc.)
    Version:  v0.2.0
    Path:     /usr/local/lib/docker/cli-plugins/docker-pass
  sandbox: "docker sandbox" is deprecated, use Docker Sandboxes instead (Docker Inc.)
    Version:  v0.13.0
    Path:     /usr/local/lib/docker/cli-plugins/docker-sandbox
  scout: Docker Scout (Docker Inc.)
    Version:  v1.24.0
    Path:     /usr/local/lib/docker/cli-plugins/docker-scout

Server:
 Containers: 17
  Running: 3
  Paused: 0
  Stopped: 14
 Images: 105
 Server Version: 29.7.2
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Discovered Devices:
  cdi: docker.com/gpu=webgpu
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 nvidia runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: e53c7c1516c3b2bff98eb76f1f4117477e6f4e66
 runc version: v1.3.6-0-g491b69ba
 init version: de40ad0
 Security Options:
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.18.33.2-microsoft-standard-WSL2
 Operating System: Docker Desktop
 OSType: linux
 Architecture: x86_64
 CPUs: 8
 Total Memory: 7.619GiB
 Name: docker-desktop
 ID: 54cf7e69-2254-481d-b3f2-d21d4f4bcc97
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http.docker.internal:3128
 HTTPS Proxy: http.docker.internal:3128
 No Proxy: hubproxy.docker.internal
 Labels:
  com.docker.desktop.address=unix:///var/run/docker-cli.sock
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false
 Firewall Backend: iptables

Answered by Luap99

Sep 28, 2026

The output seems to suggest a network issue for the container, can you use a minimal Containerfile example that just tries to curl a exmaple site somewhere to make sure this works?

Are you running podman as root or rootless? If you run docker on the same system it generally blocks all other forwarded network traffic https://fedoraproject.org/wiki/Changes/NetavarkNftablesDefault#Known_Issue_with_docker
So rootful podman networking gets blocked by the docker rules.

WSL itself is also known to have various networking issues.

View full answer

Luap99 · 2026-09-28T17:21:56Z

Luap99
Sep 28, 2026
Maintainer

The output seems to suggest a network issue for the container, can you use a minimal Containerfile example that just tries to curl a exmaple site somewhere to make sure this works?

Are you running podman as root or rootless? If you run docker on the same system it generally blocks all other forwarded network traffic https://fedoraproject.org/wiki/Changes/NetavarkNftablesDefault#Known_Issue_with_docker
So rootful podman networking gets blocked by the docker rules.

WSL itself is also known to have various networking issues.

1 reply

rgaiacs Sep 29, 2026
Author

Thanks for the reply.

can you use a minimal Containerfile example that just tries to curl a example site somewhere to make sure this works?

Yes. curl works as expected in a minimal Containerfile. For

FROM docker.io/curlimages/curl:latest

RUN curl https://google.com

RUN curl https://git.gesis.org

when I execute

podman build --no-cache -t question-29850 .

I observe both domains (google.com and git.gesis.org) to be resolved successfully

TEP 1/3: FROM docker.io/curlimages/curl:latest
STEP 2/3: RUN curl https://google.com
...
--> aac58b6cd7fa
STEP 3/3: RUN curl https://git.gesis.org
...
COMMIT question-29850
--> 5a0a99525bf7
Successfully tagged localhost/question-29850:latest
5a0a99525bf7a5bbd7cd2bac3a2b5c50e678898b78b4866fc8c92883e4fd117d

Are you running podman as root or rootless?

I'm running rootless Podman in WSL.

WSL itself is also known to have various networking issues.

I don't think the blame is on WSL. The image docker.io/library/python:3.14 .4-alpine3.23@sha256:ef097620baf1272e38264207003b0982285da3236a20ed829bf6bbf1e85fe3cb includes wget from BusyBox and I cannot resolve the domain git.gesis.org despite other domains being resolved normally :

$ podman run -it --replace --name debug docker.io/library/python:3.14.4-alpine3.23@sha256:ef097620baf1272e38264207003b0982285da3236a20ed829bf6bbf1e85fe3cb /bin/sh
/ # wget https://git.gesis.org
wget: bad address 'git.gesis.org'
/ # wget https://google.com
Connecting to google.com (142.251.14.113:443)
Connecting to www.google.com (142.251.153.119:443)
saving to 'index.html'
index.html           100% |*********************************************************| 84177  0:00:00 ETA
'index.html' saved

Other images, e.g. docker.io/curlimages/curl:latest and docker.io/library/debian:bookworm, can resolve the domain git.gesis.org without any problem:

$ podman run -it --replace --name test-with-ubuntu docker.io/library/debian:bookworm /bin/sh
# apt-get update
...
Fetched 9380 kB in 5s (1817 kB/s)                       
Reading package lists... Done
# apt-get install wget
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  ca-certificates libpsl5 libssl3 openssl publicsuffix
The following NEW packages will be installed:
  ca-certificates libpsl5 libssl3 openssl publicsuffix wget
0 upgraded, 6 newly installed, 0 to remove and 1 not upgraded.
...
done.
# wget https://git.gesis.org
--2026-09-29 09:07:55--  https://git.gesis.org/
Resolving git.gesis.org (git.gesis.org)... 193.175.238.100
Connecting to git.gesis.org (git.gesis.org)|193.175.238.100|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://git.gesis.org/users/sign_in [following]
--2026-09-29 09:08:10--  https://git.gesis.org/users/sign_in
Reusing existing connection to git.gesis.org:443.
HTTP request sent, awaiting response... 200 OK
Length: 14245 (14K) [text/html]
Saving to: 'index.html'

index.html                       100%[=======================================================>]  13.91K  --.-KB/s    in 0s      

2026-09-29 09:08:10 (191 MB/s) - 'index.html' saved [14245/14245]

My impression is that something is missing in the image docker.io/library/python:3.14.4-alpine3.23 that is fill by Podman and Docker but they fill the gap differently.

I'm OK for this to be closed as a downstream issue but would be great to know the root of the different domain resolution in this edge case.

rgaiacs · 2026-09-29T10:08:19Z

rgaiacs
Sep 29, 2026
Author

This is caused when we mix WSL + Podman + musl. I was not able to reproduce it in a "bare metal" GNU/Linux machine.

WSL + Podman

glibc

$ podman run --replace --name busybox-glibc docker.io/library/busybox:1.38.0-glibc wget https://git.gesis.org
Connecting to git.gesis.org (193.175.238.100:443)
wget: note: TLS certificate validation not implemented
Connecting to git.gesis.org (193.175.238.100:443)
saving to 'index.html'
index.html           100% |********************************| 16820  0:00:00 ETA
'index.html' saved

musl

$ podman run --replace --name busybox-musl docker.io/library/busybox:1.38.0-musl wget https://git.gesis.org
wget: bad address 'git.gesis.org'

WSL + Docker

glibc

$ docker run --name busybox-glibc docker.io/library/busybox:1.38.0-glibc wget https://git.gesis.org
Connecting to git.gesis.org (193.175.238.100:443)
wget: note: TLS certificate validation not implemented
Connecting to git.gesis.org (193.175.238.100:443)
saving to 'index.html'
index.html           100% |********************************| 16820  0:00:00 ETA
'index.html' saved

musl

$ docker run --name busybox-musl docker.io/library/busybox:1.38.0-musl wget https://git.gesis.org
Connecting to git.gesis.org (193.175.238.100:443)
wget: note: TLS certificate validation not implemented
Connecting to git.gesis.org (193.175.238.100:443)
saving to 'index.html'
index.html           100% |********************************| 16820  0:00:00 ETA
'index.html' saved

Podman

glibc

$ podman run --replace --name busybox-glibc docker.io/library/busybox:1.38.0-glibc wget https://git.gesis.org
Connecting to git.gesis.org (193.175.238.100:443)
wget: note: TLS certificate validation not implemented
Connecting to git.gesis.org (193.175.238.100:443)
saving to 'index.html'
index.html           100% |********************************| 16820  0:00:00 ETA
'index.html' saved

musl

$ podman run --replace  --name busybox-musl docker.io/library/busybox:1.38.0-musl wget https://git.gesis.org
Connecting to git.gesis.org (193.175.238.100:443)
wget: note: TLS certificate validation not implemented
Connecting to git.gesis.org (193.175.238.100:443)
saving to 'index.html'
index.html           100% |********************************| 16820  0:00:00 ETA
'index.html' saved

0 replies

Navigation Menu

Repository navigation

podman build and docker build produce very different results #29850

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

podman build and docker build produce very different results #29850

Uh oh!

rgaiacs Sep 28, 2026

Minimal working example

Containerfile

Podman

Docker

Question

Environment

Podman

Docker

Replies: 2 comments · 1 reply

Uh oh!

Luap99 Sep 28, 2026 Maintainer

Uh oh!

rgaiacs Sep 29, 2026 Author

Uh oh!

rgaiacs Sep 29, 2026 Author

WSL + Podman

glibc

musl

WSL + Docker

glibc

musl

Podman

glibc

musl

rgaiacs
Sep 28, 2026

Replies: 2 comments 1 reply

Luap99
Sep 28, 2026
Maintainer

rgaiacs Sep 29, 2026
Author

rgaiacs
Sep 29, 2026
Author