Podman
by Podman Container Tools (LF Projects) · CLI tool · also known as Pod Manager
Daemonless, rootless container engine with a Docker-compatible CLI, companion Buildah and Skopeo tools and a Podman Desktop GUI
Overview
Podman is an open-source container engine, licensed under Apache-2.0, that manages OCI containers, pods and images without a long-running root daemon: each container is a child of the invoking user's process, and rootless operation is the default. Its command-line interface mirrors Docker's closely enough that alias docker=podman works for most day-to-day commands, and it can also generate Kubernetes YAML from running pods or play existing manifests locally.
The project started at Red Hat and is now hosted as Podman Container Tools, a series of LF Projects, with the main repository under the podman-container-tools GitHub organization. On macOS and Windows, podman machine runs a Linux VM that hosts the engine, and Podman Desktop provides a graphical client. Buildah (image builds) and Skopeo (registry operations) are its usual companions.
It appeals to teams that want Docker-style workflows under a fully open-source license, or that need systemd integration through Quadlet units on Linux servers. Compose support exists through podman compose but trails the Docker reference implementation in edge cases, and the macOS experience depends on the VM layer.
Capabilities
- Run OCI containers and pods without a root daemon
- Rootless containers by default on Linux
- Docker-compatible CLI and REST API socket
- Generate and apply Kubernetes YAML for local pods
- systemd integration through Quadlet for server deployments
- podman machine VMs for macOS and Windows hosts
Typical workflows
- Run containers on a Linux server as an unprivileged user
- Replace the Docker CLI without changing images or registries
- Prototype Kubernetes manifests locally with podman kube play
Strengths
- Entirely open source under Apache-2.0
- No privileged daemon reduces the attack surface
- Close CLI compatibility with Docker
Limitations
- macOS and Windows depend on a managed VM, as with other engines
- Compose compatibility is not identical to Docker Compose
- Smaller desktop tooling ecosystem than Docker Desktop
Prerequisites
- Linux host, or macOS/Windows with podman machine
Who it is for
- Linux system administrators
- Developers seeking an open-source Docker replacement
- Red Hat and Fedora users
Alternatives & comparison
Docker remains the reference implementation with the largest tooling ecosystem but pairs its engine with a proprietary desktop product; Podman is fully open source and daemonless. OrbStack targets only macOS and is closed source. Kubernetes is the orchestration layer Podman can hand pods to when a single host is no longer enough.
- Docker
Container platform combining the Docker Engine runtime, the Compose and Build tooling, Docker Desktop for macOS and Windows, and the Docker Hub registry
MixedOpen source - Homebrew
Community-maintained package manager for macOS and Linux that installs command-line tools (formulae) and desktop apps (casks) from the terminal
Open sourceOpen source - Kubernetes
Open-source system for scheduling, scaling and operating containerized workloads across a cluster of machines
Open sourceOpen source - OrbStack
macOS application that runs Docker containers, Linux machines and a local Kubernetes cluster as a lighter replacement for Docker Desktop
ProprietaryFreemium
Sources & verification
Primary sources consulted for this record. Claims are tied to the fields each source supports; the automated link checker re-verifies every URL on a schedule.
- LicensePodman LICENSE (Apache-2.0)checked Nov 1, 2026
https://github.com/podman-container-tools/podman/blob/main/LICENSE
Supports: license_spdx, source_model
- Official documentationchecked Nov 1, 2026
- Official sitePodmanchecked Nov 1, 2026
https://podman.io/
Supports: name, summary, vendor
Footer credits Podman Container Tools, a Series of LF Projects, LLC; repository link points to github.com/podman-container-tools/podman.
- Confidence
- High
- Reviewed
- Nov 1, 2026
- Links
- Verified · Nov 2, 2026
Spotted an error?
More in Containers & virtualization
Trivy
Aqua Security · Security tools
Open-source scanner that finds known vulnerabilities, misconfigurations, exposed secrets and license issues in container images, file systems, git repositories, IaC and Kubernetes clusters