Podman: A tool for managing OCI containers and pods.
 
 
 
 
 
 
Go to file
Ed Santiago dfba6ddd4c Man pages: fix broken tables
Work around a go-md2man bug, and add a check script to make sure
this doesn't hit us again.

Background: go-md2man can't deal with a left-hand column > 31 chars.
It produces man pages that look like:

    | Something With >31 Character |                |
    |                              | ..description  |

(should be all on one row). It also has trouble when the vertical
bars are misaligned: it completely removes the right-hand side.

There's almost certainly a better solution: fix go-md2man, or
use a different conversion tool, or maybe even pre/postprocess.
But this is a quick interim solution.

Sorry for the perl. This could be done in bash/sed/awk/grep,
but not with any sort of sane error messages.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-05-26 06:08:14 -06:00
.github Merge pull request #18532 from vrothberg/template 2023-05-10 16:10:48 -04:00
cmd kube play: exit-code propagation 2023-05-25 14:46:34 +02:00
cni [CI:DOCS] Add CNI deprecation notices to documentation 2023-01-19 08:09:32 -06:00
completions update completion scripts for cobra v1.7.0 2023-04-06 13:40:48 +02:00
contrib Merge pull request #18652 from anjannath/update-qemu 2023-05-23 07:11:14 -04:00
dependencies/analyses ginkgo: restructure install work flow 2022-11-25 14:41:43 +01:00
docs Man pages: fix broken tables 2023-05-26 06:08:14 -06:00
hack Man pages: fix broken tables 2023-05-26 06:08:14 -06:00
libpod kube play: exit-code propagation 2023-05-25 14:46:34 +02:00
logo logo: correct light source reflection 2019-11-03 09:24:12 +00:00
pkg Quadlet: kube: use ExecStopPost 2023-05-25 14:46:35 +02:00
rpm [CI:BUILD] Packit: set propose-downstream action type to pre-sync 2023-05-25 09:26:35 -04:00
test Quadlet: kube: use ExecStopPost 2023-05-25 14:46:35 +02:00
utils volume,container: chroot to source before exporting content 2023-02-16 19:25:38 +05:30
vendor Merge pull request #18622 from containers/renovate/github.com-onsi-gomega-1.x 2023-05-22 11:57:05 -04:00
version bump main to v4.6.0-dev 2023-04-13 15:26:37 -04:00
.cirrus.yml Cirrus: Remove support for `[CI:COPR]` magic 2023-05-16 12:17:59 -04:00
.dockerignore Cirrus: Fix gate image & false-positive exits 2020-03-02 08:50:54 -05:00
.gitignore Quadlet: add support for setting --ip and --ip6 2023-03-06 18:36:41 -07:00
.golangci.yml golangci-lint: show all errors at once 2023-02-07 14:26:23 +01:00
.packit.sh [CI:BUILD] Packit: add jobs for downstream Fedora package builds 2023-05-23 16:41:46 -04:00
.packit.yaml [CI:BUILD] Packit: set propose-downstream action type to pre-sync 2023-05-25 09:26:35 -04:00
.pre-commit-config.yaml Cirrus: Simplify use of cache in automation 2022-05-10 10:49:32 -04:00
CODE-OF-CONDUCT.md Fix docs links due to branch rename 2021-06-10 11:30:41 -04:00
CONTRIBUTING.md Document building Podman remote on Windows hosts 2023-03-29 19:34:49 +03:00
DISTRO_PACKAGE.md [CI:DOCS] DISTRO_PACKAGE.md: List the packaging changes for v4 2022-03-07 11:34:05 -05:00
DOWNLOADS.md Add containers.conf read-only flag support 2022-12-22 11:57:28 -05:00
LICENSE Globally replace http:// with https:// 2021-08-27 06:14:46 -04:00
Makefile Man pages: fix broken tables 2023-05-26 06:08:14 -06:00
OWNERS [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson 2023-02-08 13:29:58 +01:00
README.md docs(readme): add status badges and remove hardcoded release info 2023-04-15 09:57:18 +02:00
RELEASE_NOTES.md docs: update podman-network-create.1 2023-04-11 17:04:42 +02:00
RELEASE_PROCESS.md Remove future tense from man pages 2023-05-16 15:10:33 -04:00
SECURITY.md SECURITY.md: fix the project name 2022-01-18 17:06:42 -08:00
Vagrantfile Enhancements to papr tests 2017-11-17 02:07:18 +00:00
build_osx.md Document building Podman remote on Windows hosts 2023-03-29 19:34:49 +03:00
build_windows.md Document building Podman remote on Windows hosts 2023-03-29 19:34:49 +03:00
commands-demo.md Clean up more language for inclusiveness 2023-01-27 09:40:27 -05:00
commands.md docs: update the podman logo 2022-08-07 09:11:53 +08:00
docker.in Edit the docker wrapper to use the install prefix 2023-03-31 10:06:17 +11:00
go.mod Merge pull request #18622 from containers/renovate/github.com-onsi-gomega-1.x 2023-05-22 11:57:05 -04:00
go.sum Merge pull request #18622 from containers/renovate/github.com-onsi-gomega-1.x 2023-05-22 11:57:05 -04:00
install.md update website link for install instructions 2020-12-06 21:38:10 -06:00
pyproject.toml Refactor docker-py compatibility tests 2022-03-01 09:06:52 -07:00
rootless.md Wording 2023-04-23 18:07:09 +00:00
transfer.md [CI:DOCS] podman-mount: s/umount/unmount/ 2022-12-15 12:30:40 +01:00
troubleshooting.md source code comments and docs: fix typos, language, Markdown layout 2023-05-22 07:52:16 +02:00

README.md

PODMAN logo

Podman: A tool for managing OCI containers and pods

License GitHub release (latest SemVer) Go Report Card


Podman (the POD MANager) is a tool for managing containers and images, volumes mounted into those containers, and pods made from groups of containers. Podman runs containers on Linux, but can also be used on Mac and Windows systems using a Podman-managed virtual machine. Podman is based on libpod, a library for container lifecycle management that is also contained in this repository. The libpod library provides APIs for managing containers, pods, container images, and volumes.

All releases are GPG signed. Public keys of members of the team approved to make releases are located here.

Overview and scope

At a high level, the scope of Podman and libpod is the following:

  • Support for multiple container image formats, including OCI and Docker images.
  • Full management of those images, including pulling from various sources (including trust and verification), creating (built via Containerfile or Dockerfile or committed from a container), and pushing to registries and other storage backends.
  • Full management of container lifecycle, including creation (both from an image and from an exploded root filesystem), running, checkpointing and restoring (via CRIU), and removal.
  • Full management of container networking, using Netavark.
  • Support for pods, groups of containers that share resources and are managed together.
  • Support for running containers and pods without root or other elevated privileges.
  • Resource isolation of containers and pods.
  • Support for a Docker-compatible CLI interface, which can both run containers locally and on remote systems.
  • No manager daemon, for improved security and lower resource utilization at idle.
  • Support for a REST API providing both a Docker-compatible interface and an improved interface exposing advanced Podman functionality.
  • Support for running on Windows and Mac via virtual machines run by podman machine.

Roadmap

  1. A fully-featured GUI frontend for podman machine
  2. Further improvements to podman generate kube and podman play kube
  3. Improvements to Pods, including the addition of pod-level resource limits

Communications

If you think you've identified a security issue in the project, please DO NOT report the issue publicly via the GitHub issue tracker, mailing list, or IRC. Instead, send an email with as many details as possible to security@lists.podman.io. This is a private mailing list for the core maintainers.

For general questions and discussion, please use Podman's channels.

For discussions around issues/bugs and features, you can use the GitHub issues and PRs tracking system.

There is also a mailing list at lists.podman.io. You can subscribe by sending a message to podman-join@lists.podman.io with the subject subscribe.

Rootless

Podman can be easily run as a normal user, without requiring a setuid binary. When run without root, Podman containers use user namespaces to set root in the container to the user running Podman. Rootless Podman runs locked-down containers with no privileges that the user running the container does not have. Some of these restrictions can be lifted (via --privileged, for example), but rootless containers will never have more privileges than the user that launched them. If you run Podman as your user and mount in /etc/passwd from the host, you still won't be able to change it, since your user doesn't have permission to do so.

Almost all normal Podman functionality is available, though there are some shortcomings. Any recent Podman release should be able to run rootless without any additional configuration, though your operating system may require some additional configuration detailed in the install guide.

A little configuration by an administrator is required before rootless Podman can be used, the necessary setup is documented here.

Podman Desktop

Podman Desktop is a new project under the container organization built to help the developers working with containers from their local environment with a desktop UI. Podman Desktop is still in its early days, but already provides capabilities to list your images, interact with containers (access logs, get a terminal), connect to registries (pull private images, push your images) and configure podman settings (proxies). The project develops on Github and contributors are welcome.

Out of scope

  • Specialized signing and pushing of images to various storage backends. See Skopeo for those tasks.
  • Support for the Kubernetes CRI interface for container management. The CRI-O daemon specializes in that.

OCI Projects Plans

Podman uses OCI projects and best of breed libraries for different aspects:

  • Runtime: We use the OCI runtime tools to generate OCI runtime configurations that can be used with any OCI-compliant runtime, like crun and runc.
  • Images: Image management uses the containers/image library.
  • Storage: Container and image storage is managed by containers/storage.
  • Networking: Networking support through use of Netavark and Aardvark. Rootless networking is handled via slirp4netns.
  • Builds: Builds are supported via Buildah.
  • Conmon: Conmon is a tool for monitoring OCI runtimes, used by both Podman and CRI-O.
  • Seccomp: A unified Seccomp policy for Podman, Buildah, and CRI-O.

Podman Information for Developers

For blogs, release announcements and more, please checkout the podman.io website!

Installation notes Information on how to install Podman in your environment.

OCI Hooks Support Information on how Podman configures OCI Hooks to run when launching a container.

Podman API Documentation on the Podman REST API.

Podman Commands A list of the Podman commands with links to their man pages and in many cases videos showing the commands in use.

Podman Troubleshooting Guide A list of common issues and solutions for Podman.

Podman Usage Transfer Useful information for ops and dev transfer as it relates to infrastructure that utilizes Podman. This page includes tables showing Docker commands and their Podman equivalent commands.

Tutorials Tutorials on using Podman.

Remote Client A brief how-to on using the Podman remote client.

Basic Setup and Use of Podman in a Rootless environment A tutorial showing the setup and configuration necessary to run Rootless Podman.

Release Notes Release notes for recent Podman versions.

Contributing Information about contributing to this project.

Buildah and Podman relationship

Buildah and Podman are two complementary open-source projects that are available on most Linux platforms and both projects reside at GitHub.com with Buildah here and Podman here. Both, Buildah and Podman are command line tools that work on Open Container Initiative (OCI) images and containers. The two projects differentiate in their specialization.

Buildah specializes in building OCI images. Buildah's commands replicate all of the commands that are found in a Dockerfile. This allows building images with and without Dockerfiles while not requiring any root privileges. Buildahs ultimate goal is to provide a lower-level coreutils interface to build images. The flexibility of building images without Dockerfiles allows for the integration of other scripting languages into the build process. Buildah follows a simple fork-exec model and does not run as a daemon but it is based on a comprehensive API in golang, which can be vendored into other tools.

Podman specializes in all of the commands and functions that help you to maintain and modify OCI images, such as pulling and tagging. It also allows you to create, run, and maintain those containers created from those images. For building container images via Dockerfiles, Podman uses Buildah's golang API and can be installed independently from Buildah.

A major difference between Podman and Buildah is their concept of a container. Podman allows users to create "traditional containers" where the intent of these containers is to be long lived. While Buildah containers are really just created to allow content to be added back to the container image. An easy way to think of it is the buildah run command emulates the RUN command in a Dockerfile while the podman run command emulates the docker run command in functionality. Because of this and their underlying storage differences, you can not see Podman containers from within Buildah or vice versa.

In short, Buildah is an efficient way to create OCI images while Podman allows you to manage and maintain those images and containers in a production environment using familiar container cli commands. For more details, see the Container Tools Guide.

Podman Hello

$ podman run quay.io/podman/hello
Trying to pull quay.io/podman/hello:latest...
Getting image source signatures
Copying blob a6b3126f3807 done
Copying config 25c667d086 done
Writing manifest to image destination
Storing signatures
!... Hello Podman World ...!

         .--"--.
       / -     - \
      / (O)   (O) \
   ~~~| -=(,Y,)=- |
    .---. /`  \   |~~
 ~/  o  o \~~~~.----. ~~
  | =(X)= |~  / (O (O) \
   ~~~~~~~  ~| =(Y_)=-  |
  ~~~~    ~~~|   U      |~~

Project:   https://github.com/containers/podman
Website:   https://podman.io
Documents: https://docs.podman.io
Twitter:   @Podman_io

Podman formerly offered a Varlink-based API for remote management of containers. However, this API was replaced by the REST API. Varlink support has been removed as of the 3.0 release. For more details, you can see this blog.