summaryrefslogtreecommitdiffstats
path: root/system/podman/README
blob: 67056d1aff323f05dd6b1e7ce966f996be22d8bf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
podman - for running OCI-based containers in Pods

libpod provides a library for applications looking to use the
Container Pod concept popularized by Kubernetes. libpod also contains
a tool called podman for managing Pods, Containers, and Container
Images.

At a high level, the scope of libpod and podman is the following:
* Support multiple image formats including the existing Docker/OCI
  image formats.
* Support for multiple means to download images including trust & image
  verification.
* Container image management (managing image layers, overlay
  filesystems, etc).
* Full management of container lifecycle
* Support for pods to manage groups of containers together
* Resource isolation of containers and pods.

These container runtimes can run as non-root, but require sub-uid/gid
mappings.

To run podman as a user:

    echo 'user.max_user_namespaces=30111' >> /etc/sysctl.conf
    echo '<YOUR_USER>:100000:65536' >> /etc/subuid
    echo '<YOUR_USER>:100000:65536' >> /etc/subgid