Podman - create, run and secure Linux containers

on YouTube ↗39m

" summary

Claims a daemonless, rootless from day one engine that runs containers with a fork‑exec model and user‑namespace mappings (configured in /etc/subuid and /etc/subgid) so root inside maps to an unprivileged host UID, preserving audit trails and reducing escape impact. Components include conmon (small C container monitor) and systemd integration that generates unit files and offers auto-update via systemd timer with planned rollbacks. Podman 2.0 adds a Docker-compatible REST API plus Go/Python bindings and remote clients; registries.conf supports mirrors to mitigate Docker Hub rate limits.

AI-written summary · about

" chapters (14)

1. 0:00Intro
2. 0:36Open Source
3. 2:04Swiss Army Knife
4. 3:06Building an image
5. 5:09What is Podman
6. 7:34Compatibility with Docker
7. 9:25Security implications
8. 12:25Rootless containers
9. 13:46User name spaces
10. 18:27Systemd
11. 23:25Auto Update
12. 27:57Kubernetes support
13. 30:21Roadmap
14. 33:16Runtime Secrets

" related talks

• 34mPodman 101 and Beyond!Pierre Blanc · ContainerCon @ Open Source Summit Europe 2022
• 53mContainers without Daemons - Podman InternalsMatthew Heon · DevConf.CZ 2019
• 30mPodman 6.0 — The Next Evolution of Rootless ContainerizationDavid Darrah · DevConf.CZ 2026
• 40mRootless Containers with PodmanSteven Ellis · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 19mRootless containers with PodmanSteven Ellis · Linux.conf.au 2021 Systems Administration Miniconf
• 39mReplacing Docker with PodmanDaniel Walsh · DevConf.CZ 2019
• 43mWhat new features are in Podman?Daniel Walsh, Valentin Rothberg · DevConf.CZ 2021
• 19mRootless containers with PodmanSteven Ellis · linux.conf.au 2021