凭据访问
Reads registry credentials, build secrets, environment variables, and mounted files.
代理安全
代理安全回答
podman builds and runs containers with registry and host filesystem access.
远程变更
Can push images and change container or pod state.
发布/制品风险
Can build and publish container images.
推荐控制
Gate pushes, privileged runs, host mounts, and kube generation.
代理使用指南
Allow local inspect/build with limited mounts; require approval for publish or privileged actions.
安装
其他安装命令
macOS
Homebrew已验证 · 100%
brew install podmanlocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install podmanMacPorts ports tree · sysutils/podman/Portfile · 来源: api.github.com
Linux
Alpine Linux apk已验证 · 92%
sudo apk add podmanAlpine Linux edge package indexes · podman · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install podmanDebian stable package indexes · podman · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install podmanFedora Rawhide package metadata · podman · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#podmannixpkgs package indexes · pkgs/by-name/po/podman/package.nix · 来源: api.github.com
Arch Linux pacman已验证 · 92%
sudo pacman -S podmanArch Linux sync databases · podman · 来源: geo.mirror.pkgbuild.com
openSUSE zypper已验证 · 92%
sudo zypper install podmanopenSUSE Tumbleweed package metadata · podman · 来源: download.opensuse.org
Windows
Scoop已验证 · 92%
scoop install main/podmanScoop official bucket manifest trees · bucket/podman.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id RedHat.Podman -eWindows Package Manager source index · RedHat.Podman · 来源: cdn.winget.microsoft.com
概览
软件包摘要
Tool for managing OCI containers and pods
历史
项目历史与用法
Podman is a daemonless OCI container engine for managing containers, images, volumes, networks, and pods. Most commands can run without elevated privileges, and its command line is deliberately comparable to Docker's.
项目历史
Podman grew from the libpod work in the Red Hat container-tools ecosystem. Its original goal was to provide a fully featured debugging experience for CRI-O, but it evolved into a general-purpose engine for OCI containers, images, volumes, and pods.
The first public Podman release was v0.2 in 2018. Podman reached 1.0 in January 2019, emphasizing rootless containers, pods, Kubernetes YAML, remote access, a Docker-compatible command line, and operation without a daemon.
采用历史
Podman gained adoption through its Docker-comparable command line, daemonless architecture, rootless operation, and close alignment with OCI and Kubernetes concepts. Linux distributions and Red Hat's container-tooling ecosystem made it a prominent alternative to Docker Engine.
Podman later expanded beyond native Linux hosts through remote clients and Podman-managed virtual machines on macOS and Windows. A surrounding ecosystem—including Buildah, Skopeo, Podman Desktop, Compose providers, Quadlet generators, and terminal interfaces—supports specialized workflows.
使用方式
Developers use Podman to build, pull, run, inspect, network, and publish OCI containers and pods. Administrators commonly combine rootless Podman with systemd and Quadlet for persistent services.
On macOS and Windows, Podman operates containers inside a managed Linux virtual machine. Registry authentication is handled through containers-auth files, with Docker's config file supported as a credential fallback.
为什么软件包爱好者会关心
Podman matters to package and systems enthusiasts because it exposes Linux container primitives without requiring a permanent central daemon and makes unprivileged container operation a first-class workflow.
Its modular relationship with Buildah, shared containers configuration and storage libraries, systemd integration through Quadlet, and familiar Docker-like CLI make it both a practical engine and an instructive alternative design for container tooling.
时间线
- 2018: Podman made its first public release as v0.2.
- 2019: Podman 1.0 established it as a fully featured daemonless container engine.
- 2020s: Remote clients and Podman-managed virtual machines broadened use on macOS and Windows.
- 2020s: Quadlet became Podman's declarative systemd workflow for containers and related resources.
Related projects
- Buildah creates OCI images and shares image storage with Podman. Skopeo inspects and transfers images. CRI-O serves Kubernetes runtimes, while Podman Desktop, podman-compose, Podlet, and Podman TUI provide graphical, Compose, Quadlet-generation, and terminal workflows.
来源
安全态势
风险级别：orange
container infrastructure.
风险分类器
orange 风险 · 高 置信度 · infrastructure
原因
- container infrastructure
信号
- override:podman
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- formula 元数据声明了服务或守护进程块。
- Homebrew bottle 元数据适用于 5 个平台目标。
- 构建元数据列出 3 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/usr/share/containers/containers.conf/etc/containers/containers.conf$XDG_CONFIG_HOME/containers/containers.conf~/.config/containers/containers.conf/etc/containers/registries.conf$XDG_CONFIG_HOME/containers/registries.conf~/.config/containers/registries.conf/etc/containers/storage.conf$XDG_CONFIG_HOME/containers/storage.conf~/.config/containers/storage.conf$XDG_CONFIG_HOME/containers/podman-connections.json~/.config/containers/podman-connections.json
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
$XDG_RUNTIME_DIR/containers/auth.json$XDG_CONFIG_HOME/containers/auth.json~/.config/containers/auth.json
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
podman | cli | 全局可执行文件 | |
podman-remote | cli | 全局可执行文件 | |
podmansh | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-11-04
管理器版本6.1.4
管理器更新时间2026-10-31
本地数据OK
上游当前
检测到的最新版本v6.1.4
https://github.com/podman-container-tools/podman
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:podman |
|---|---|
| 版本 | 6.1.4 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/podman |
| 主页 | https://podman.io/ |
| 仓库 | https://github.com/podman-container-tools/podman |
| 上游文档 | https://podman.io/ |
| 许可证 | Apache-2.0 AND GPL-3.0-or-later |
| 源码归档 | https://github.com/podman-container-tools/podman/archive/refs/tags/v6.1.4.tar.gz |
| 最后更新 | 2026-10-31T16:06:09+09:00 |
| Pulse | updated |
| 构建依赖 | go, go-md2man, make |
| Bottle | 可用 (于 arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | declared |
| 注意事项 | In order to run containers locally, podman depends on a Linux kernel. One can be started manually using `podman machine` from this package. To start a podman VM automatically at login, also install the cask "podman-desktop". |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | podman |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Requirements |
|
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
podman 5.4.2+ds1-2+b2
tool to manage containers and pods
https://github.com/containers/podman
sudo apt install podman- Section: admin
- Architecture: amd64
- Source Package: podman
- 11 依赖
- 15 可选依赖
- normalized package name match
- 匹配方式：Podman
Debian apt95%
podman-docker 5.4.2+ds1-2+b2
tool to manage containers and pods (Docker CLI)
https://github.com/containers/podman
sudo apt install podman-docker- Section: admin
- Architecture: amd64
- Source Package: podman
- 1 依赖
- 1 可选依赖
- normalized package name match
- 匹配方式：Podman
Debian apt95%
podman-remote 5.4.2+ds1-2+b2
tool to manage containers and pods (remote CLI)
https://github.com/containers/podman
sudo apt install podman-remote- Section: admin
- Architecture: amd64
- Source Package: podman
- 2 依赖
- normalized package name match
- 匹配方式：Podman
Nix95%
podman
nix profile install nixpkgs#podman- normalized package name match
- 匹配方式：Podman
Ubuntu apt95%
podman 4.9.3+ds1-1build2
tool to manage containers and pods
https://github.com/containers/podman
sudo apt install podman- Section: universe/admin
- Architecture: amd64
- Source Package: libpod
- 10 依赖
- 11 可选依赖
- normalized package name match
- 匹配方式：Podman
apk95%
podman 5.8.6-r0
Simple management tool for pods, containers and images
sudo apk add podman- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Podman
apk95%
podman-bash-completion 5.8.6-r0
Bash completions for podman
sudo apk add podman-bash-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- normalized package name match
- 匹配方式：Podman
apk95%
podman-doc 5.8.6-r0
Simple management tool for pods, containers and images (documentation)
sudo apk add podman-doc- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- normalized package name match
- 匹配方式：Podman
apk95%
podman-docker 5.8.6-r0
Emulate Docker CLI using Podman
sudo apk add podman-docker- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Podman
apk95%
podman-docker-doc 5.8.6-r0
Emulate Docker CLI using Podman (documentation)
sudo apk add podman-docker-doc- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- 1 依赖
- normalized package name match
- 匹配方式：Podman
apk95%
podman-docker-systemd 5.8.6-r0
Emulate Docker CLI using Podman (systemd files)
sudo apk add podman-docker-systemd- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- 1 依赖
- normalized package name match
- 匹配方式：Podman
apk95%
podman-fish-completion 5.8.6-r0
Fish completions for podman
sudo apk add podman-fish-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- normalized package name match
- 匹配方式：Podman
apk95%
podman-openrc 5.8.6-r0
Simple management tool for pods, containers and images (OpenRC init scripts)
sudo apk add podman-openrc- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- normalized package name match
- 匹配方式：Podman
apk95%
podman-remote 5.8.6-r0
Remote CLI for Podman
sudo apk add podman-remote- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Podman
apk95%
podman-systemd 5.8.6-r0
Simple management tool for pods, containers and images (systemd files)
sudo apk add podman-systemd- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- 1 依赖
- normalized package name match
- 匹配方式：Podman
apk95%
podman-zsh-completion 5.8.6-r0
Zsh completions for podman
sudo apk add podman-zsh-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: podman
- normalized package name match
- 匹配方式：Podman
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation