Container Runtimes/Managers, Base Images and Container Tools. Podman, Buildah & Skopeo¶
Architectural Context
Detailed reference for Container Runtimes/Managers, Base Images and Container Tools. Podman, Buildah & Skopeo in the context of The Container Stack.
Standard Reference¶
- inovex.de: Welcome To The Container Jungle: Docker vs. containerd vs. Nabla vs. Kata vs. Firecracker and more! π [COMMUNITY-TOOL]
- thenewstack.io: Container Best Practices: What They Are and Why You Should Care [COMMUNITY-TOOL]
- OCI: Open Container Initiative [COMMUNITY-TOOL]
- scrivano.org: the journey to speed up running OCI containers [COMMUNITY-TOOL]
- Frakti β 675 [COMMUNITY-TOOL]
- Why Red Hat is investing in CRI-O and Podman [COMMUNITY-TOOL]
- Libpod: Library and tool for running OCI-based containers in Pods β 31763 [DE FACTO STANDARD] β - Libpod is a library used to create container pods. Home of Podman.
- Libpod provides a library for applications looking to use the Container Pod concept, popularized by Kubernetes. Libpod also contains the Pod Manager tool (Podman). Podman manages pods, containers, container images, and container volumes.
- Podman remote clients for macOS and Windows [COMMUNITY-TOOL]
- redhat.com: Using Podman and Docker Compose [COMMUNITY-TOOL]
- redhat.com: From Docker Compose to Kubernetes with Podman [COMMUNITY-TOOL]
- redhat.com: How to replace Docker with Podman on a Mac [COMMUNITY-TOOL]
- redhat.com: Exploring the new Podman secret command π [COMMUNITY-TOOL]
- redhat.com: How to automate Podman installation and deployment using Ansible π [COMMUNITY-TOOL]
- redhat.com: How to use auto-updates and rollbacks in Podman [COMMUNITY-TOOL] β - New auto-update capabilities enable you to use Podman in edge use cases, update workloads once they are connected to the network, and roll back failures to a known-good state.
- Podman: the best tool for running containers on the edge servers. On the edge you want no human intervention. Podman+systemd support auto-update of container image & rollback, when update fails.
- crunchtools.com: Should I Use Docker Compose Or Podman Compose With Podman? [COMMUNITY-TOOL]
- redhat.com: Build Kubernetes pods with Podman play kube [COMMUNITY-TOOL]
- redhat.com: How to replace Docker with Podman on a Mac, revisited [COMMUNITY-TOOL]
- redhat.com: Create fast, easy, and repeatable containers with Podman and shell scripts [COMMUNITY-TOOL]
- redhat.com: How to use Podman to get information about your containers [COMMUNITY-TOOL]
- redhat.com: 5 Podman features to try now [COMMUNITY-TOOL]
- redhat.com/sysadmin/quadlet-podman [COMMUNITY-TOOL]
- Red Hat Ecosystem Catalog [COMMUNITY-TOOL]
- How to use the --privileged flag with container engines [COMMUNITY-TOOL]
- Promoting container images between registries with skopeo [COMMUNITY-TOOL]
- Skopeo β 10891 [ENTERPRISE-STABLE]
- sherifabdlnaby/kubephp β 455 [COMMUNITY-TOOL]
- containerd - An open and reliable container runtime β 20746 [DE FACTO STANDARD]
- What is Podman and How Does it Compare to Docker? [COMMUNITY-TOOL]
- blog.alexellis.io: Building containers without Docker π [COMMUNITY-TOOL]
- Buildah.io [COMMUNITY-TOOL]
- Podman.io [COMMUNITY-TOOL]
- A Practical Introduction to Container Terminology [COMMUNITY-TOOL]
- runc β 13237 [ENTERPRISE-STABLE]
- crun β 3933 [ENTERPRISE-STABLE]
- Conmon β 479 [COMMUNITY-TOOL]
- Kubernetes.io: Container runtimes [COMMUNITY-TOOL]
- Docker [COMMUNITY-TOOL]
- containerd.io [COMMUNITY-TOOL]
- cri-o.io [COMMUNITY-TOOL]
- Intro to Podman [COMMUNITY-TOOL]
- redhat.com: Be careful when pulling images by short name [COMMUNITY-TOOL]
- developers.redhat.com: Podman and Buildah for Docker users π [COMMUNITY-TOOL]
- podmain.io: Announcing Podman v2 [COMMUNITY-TOOL]
- youtube: Getting started with Podman [COMMUNITY-TOOL]
- developers.redhat.com: Rootless containers with Podman: The basics [COMMUNITY-TOOL]
- tecmint.com: How to Manage Containers Using Podman and Skopeo in RHEL 8 [COMMUNITY-TOOL]
- thenewstack.io: Tutorial: Host a Local Podman Image Registry π [COMMUNITY-TOOL]
- fedoramagazine.org: Manage containers with Podman Compose [COMMUNITY-TOOL]
- medium: Podman: Getting Started [COMMUNITY-TOOL]
- oldgitops.medium.com: Setting up Podman on WSL2 in Windows 10 π [COMMUNITY-TOOL]
- youtube: Podman in Podman (Running a container within a container) [COMMUNITY-TOOL]
- wbhegedus.me: Configuring Podman for WSL2 π [COMMUNITY-TOOL]
- developers.redhat.com: Using Podman Compose with Microcks: A cloud-native' API mocking and testing tool [COMMUNITY-TOOL]
- tutorialworks.com: How to Start Containers Automatically, with Podman and' Systemd [COMMUNITY-TOOL]
- youtube: Podman 3 and Docker Compose - How Does the Dockerless Compose Work?' π [COMMUNITY-TOOL]
- fedoramagazine.org: Use Docker Compose with Podman to Orchestrate Containers' on Fedora Linux [COMMUNITY-TOOL]
- opensource.com: Run a Linux virtual machine in Podman [COMMUNITY-TOOL]
- developers.redhat.com: Transitioning from Docker to Podman π [COMMUNITY-TOOL]
- pythonspeed.com: Using Podman with BuildKit, the better Docker image builder' π [COMMUNITY-TOOL]
- devopscube.com: Podman Tutorial For Beginners: Step by Step Guides π [COMMUNITY-TOOL]
- kubernetespodcast.com: Podman, with Daniel Walsh and Brent Baude [COMMUNITY-TOOL]
- opensource.com: Get podman up and running on Windows using Linux [COMMUNITY-TOOL]
- medium.com: Exploring Docker alternative β Podman [COMMUNITY-TOOL]
- darumatic.com: Podman - Introduction π [COMMUNITY-TOOL]
- iongion.github.io: Podman Desktop Companion π [COMMUNITY-TOOL]
- imaginarycloud.com: Podman vs Docker: What are the differences? [COMMUNITY-TOOL]
- opensource.com: Run containers on Linux without sudo in Podman [COMMUNITY-TOOL]
- medium.com/@raghavendraguttur: Podman Containers β Beginnerβs Guide [COMMUNITY-TOOL]
- nilesh93.medium.com: Replacing Docker Desktop with Podman and Kind in MacOS [COMMUNITY-TOOL]
- dev.to: Containers without Docker (podman, buildah, and skopeo) [COMMUNITY-TOOL]
- Podman Desktop [COMMUNITY-TOOL]
- developers.redhat.com: Podman expands to the Desktop [COMMUNITY-TOOL]
- iximiuz.com: In Pursuit of Better Container Images: Alpine, Distroless,' Apko, Chisel, DockerSlim, oh my! [COMMUNITY-TOOL]
- Introducing the Red Hat Universal Base Image π [COMMUNITY-TOOL]
- What is Red Hat Universal Base Image? [COMMUNITY-TOOL]
- RH Universal Base Image FAQ [COMMUNITY-TOOL]
- ubi-micro: RHEL tiny images to build containers π [COMMUNITY-TOOL]
- developers.redhat.com: How to pick the right container base image [COMMUNITY-TOOL]
- itnext.io: Docker, Kaniko, Buildah [COMMUNITY-TOOL]
- blog.kubesimplify.com: Getting started with ko: A fast container image builder' for your Go applications [COMMUNITY-TOOL]
- github.com/containers/buildah β 8795 [ENTERPRISE-STABLE]
- developers.redhat.com: Getting started with Buildah [COMMUNITY-TOOL]
- youtube: How to live without Docker for developers - Part 1 | Migration' from Docker to Buildah and Podman [COMMUNITY-TOOL]
DevSecOps¶
CICD Pipeline Security¶
Podman¶
- Build trusted pipelines/Guards with Podman containers [COMMUNITY-TOOL] [GUIDE] β Evaluates strategies for building rootless, secure continuous integration pipelines using Red Hat's Podman. Contrasts Podman's daemonless security with Docker's privileged execution models to prevent pipeline takeover attacks.
Infrastructure¶
Containerization¶
Kernel Internals¶
- Controlling Process Resources with Linux Control Groups (cgroups) [ADVANCED LEVEL] [ENTERPRISE-STABLE] [GUIDE] β A deep, interactive laboratory walk-through demonstrating how Linux Control Groups (cgroups) throttle and isolate system resources. Crucial baseline knowledge for understanding container limits in Kubernetes.
Observability¶
Logging¶
Command Line Tools¶
- bul: Interactive TUI for Exploring Kubernetes Container Logs β 16 [COMMUNITY-TOOL] β An interactive Terminal User Interface (TUI) written in Go for streaming and searching Kubernetes container logs. Grounding suggests that development has stalled (inactive for over 4 years), so while technically functional for local dev, tools like Stern or K9s are preferred in enterprise environments.
π‘ Explore Related: Kubernetes Bigdata | Kubernetes Operators Controllers | Openshift