Podman

Podman (the POD MANager) is a tool for managing containers and images, volumes mounted into those containers, and pods made from groups of containers. Podman runs containers on Linux, but can also be used on Mac and Windows systems using a Podman-managed virtual machine. Podman is based on libpod, a library for container lifecycle management that is also contained in this repository. The libpod library provides APIs for managing containers, pods, container images, and volumes. Podman releases a new major or minor release 4 times a year, during the second week of February, May, August, and November. Patch releases are more frequent and may occur at any time to get bugfixes out to users. All releases are PGP signed. Public keys of members of the team approved to make releases are located here. Support for multiple container image formats, including OCI and Docker images. Full management of those images, including pulling from various sources (including trust and verification), creating (built via Containerfile or Dockerfile or committed from a container), and pushing to registries and other storage backends. Full management of container lifecycle, including creation (both from an image and from an exploded root filesystem), running, checkpointing and restoring (via CRIU), and removal. Full management of container networking, using Netavark. Support for pods, groups of containers that share resources and are managed together. Support for running containers and pods without root or other elevated privileges. Resource isolation of containers and pods. Support for a Docker-compatible CLI interface, which can both run containers locally and on remote systems. No manager daemon, for improved security and lower resource utilization at idle. Support for a REST API providing both a Docker-compatible interface and an improved interface exposing advanced Podman functionality. Support for running on Windows and Mac via virtual machines run by podman machine . If you think you've identified a security issue in the project, please DO NOT report the issue publicly via the GitHub issue tracker, mailing list, or IRC. Instead, send an email with as many details as possible to [email protected] . This is a private mailing list for the core maintainers. For discussions around issues/bugs and features, you can use the GitHub issues and PRs tracking system. All Podman meetings are open to everyone, free to attend, and hosted via Zoom through the CNCF/Linux Foundation. The full calendar is available on the Podman Container Tools LFX Meetings page. Registering for a meeting sends you an invite for that meeting and all subsequent recurring instances. Podman Community Meeting and its agenda First Tuesday of even-numbered months (Feb, Apr, Jun, Aug, Oct, Dec) at 11:00 a.m. Eastern (UTC-4 summer / UTC-5 winter) ~1 hour — demos, announcements, and community updates Podman Monday Office Hours and its agenda Every Monday at 10:00 a.m. Eastern (UTC-4 summer / UTC-5 winter) 30 min — technical discussions, open topics Podman Thursday Office Hours and its agenda Every Thursday at 11:00 a.m. Eastern (UTC-4 summer / UTC-5 winter) 30 min — technical discussions, open topics Rootless Podman can be easily run as a normal user, without requiring a setuid binary. When run without root, Podman containers use user namespaces to set root in the container to the user running Podman. Rootless Podman runs locked-down containers with no privileges that the user running the container does not have. Some of these restrictions can be lifted (via --privileged , for example), but rootless containers will never have more privileges than the user that launched them. If you run Podman as your user and mount in /etc/passwd from the host, you still won't be able to change it, since your user doesn't have permission to do so. Almost all normal Podman functionality is available, though there are some shortcomings. Any recent Podman release should be able to run rootless wit