* [Topics](/en/topics "Topics")
* What is Podman?
What is Podman?
===============
Updated  January 28, 2026•*7*-minute read
Copy URL
Jump to section
---------------
OverviewWhat are pods?What makes Podman different?How does Podman manage containers?What is Podman Desktop?Podman, Buildah, and SkopeoPodman vs. DockerWhy Podman?Red Hat can help
Overview
--------
Podman (short for pod manager) is an [open source](/en/topics/open-source/what-is-open-source) tool for developing, managing, and running containers. Developed by Red Hat® engineers along with the open source community, Podman manages the entire [container](/en/topics/containers) ecosystem using the libpod library.
Podman’s daemonless and inclusive architecture makes it an accessible, security-focused option for container management. Its accompanying tools and features, such as [Buildah](/en/topics/containers/what-is-buildah) and [Skopeo](/en/topics/containers/what-is-skopeo), let developers customize their container environments to suit their needs. Developers can also take advantage of [Podman Desktop](/en/topics/containers/what-is-podman-desktop), a graphical user interface (GUI) for using Podman in local environments.
Users can run Podman on various Linux® distributions, such as [Red Hat Enterprise Linux](/en/technologies/linux-platforms/enterprise-linux), [Fedora](/en/topics/linux/fedora-vs-red-hat-enterprise-linux), [CentOS](/en/topics/linux/what-is-centos), and [Ubuntu](https://ubuntu.com/).
[Try Red Hat Enterprise Linux](/en/technologies/linux-platforms/enterprise-linux/server/trial "product | red hat enterprise linux | try it")
This video can't play due to privacy settings
To change your settings, select the "Cookie Preferences" link in the footer and opt in to "Advertising Cookies or try disabling adblockers."
What are pods?
--------------
[Pods](https://enterprisersproject.com/article/2020/9/pod-cluster-container-what-is-difference) are groups of containers that run together and share the same resources, similar to [Kubernetes](/en/topics/containers/what-is-kubernetes) pods. Podman manages these pods via a simple command-line interface (CLI) and the libpod library, which provides application programming interfaces (APIs) for managing containers, pods, container images, and volumes. Podman's CLI creates and supports [Open Container Initiative](https://opencontainers.org/) (OCI) containers, which are designed to meet industry standards for container runtimes and formats. More advanced building capabilities are available in the related project, Buildah.
Each pod is composed of 1 infra container and any number of regular containers. The infra container keeps the pod running and maintains user namespaces, which isolate containers from the host. The other containers each have a monitor to keep track of their processes and look out for dead containers―nonfunctioning containers that can’t be taken out of the environment because some of their resources are still being used.
Red Hat to Contribute Comprehensive Container Tools Collection to Cloud Native Computing Foundation
---------------------------------------------------------------------------------------------------
[Read the blog post](/en/blog/red-hat-contribute-comprehensive-container-tools-collection-cloud-native-computing-foundation "Read the blog post")
What makes Podman different from other container engines?
---------------------------------------------------------
Podman stands out from other container engines because it’s daemonless, meaning it doesn't rely on a process with root privileges to run containers.
Daemons are processes that run in the background of your system to do the work of running containers without a user interface. Think of daemons as the intermediary communicating between the user and the container itself.
While daemons can be a convenient way to manage your container environment, they can also introduce security vulnerabilities. Many daemons run with root privileges. In Linux systems, the root account acts as a superuser with administrative access (while bypassing the need for admin verification) to read files, install programs, edit applications, and more. This makes daemons an ideal target for hackers who want to gain control of your containers and infiltrate the host system.
Podman cuts out the daemon and lets regular users run containers without interacting with a root-owned daemon, or allows for the use of rootless containers. By going rootless, users can create, run, and manage containers without requiring processes with admin privileges, making your container environment more accessible while reducing security risks. Additionally, Podman launches each container with a [Security-Enhanced Linux](/en/topics/linux/what-is-selinux) (SELinux) label, giving administrators more control over what resources and capabilities are provided to container processes.
How does Podman manage containers?
----------------------------------
Users can invoke Podman from the command line to pull containers from a repository and run them. Podman calls the configured container runtime to create the running container. But without a dedicated daemon, Podman uses [systemd](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/system_administrators_guide/chap-managing_services_with_systemd?extIdCarryOver=true&intcmp=701f2000001OMH6AAO&percmp=7015Y000003sv1aQAA&sc_cid=7013a000002gXjsAAE)—a system and service manager for Linux operating systems—to make updates and keep containers running in the background. By integrating systemd and Podman, you can generate control units for your containers and run them with systemd automatically enabled.
Users can control the automatic starting and managing of their containers through their own repositories on the system or using systemd units. Allowing users to manage their own resources, and running containers rootlessly, can remove the temptation to add privileges like write access to areas of the system that shouldn’t have them. This also ensures that every user has separate sets of containers and images and can use Podman concurrently on the same host without interfering with each other. When users finish their work, they can push changes to a common registry to share their image with others.
Podman also deploys a [RESTful API](/en/topics/api/what-is-a-rest-api) (REST API) to manage containers. REST stands for representational state transfer. A REST API is an API that conforms to the constraints of REST architectural style and allows for interaction with RESTful web services. With the REST API, you can call Podman from platforms such as cURL, Postman, Google's Advanced REST client, and many others.
[Try these 5 Podman features now](https://www.redhat.com/sysadmin/podman-features-1)
What is Podman Desktop?
-----------------------
Podman Desktop is a GUI for Podman, which provides a central place for developers to work with containers right on their laptop or workstation. Developers can build, push, and pull images and manage Podman resources directly using a GUI that’s consistent across local Linux, Windows, and macOS environments. Podman Desktop also lets developers deliver ready-to-deploy containerized applications to Kubernetes environments.
Podman Desktop supports extension packs, which open up additional capabilities. One example, [Podman AI Lab](https://developers.redhat.com/products/podman-desktop/podman-ai-lab), adds recipes for building applications that work with [large language models (LLMs)](/en/topics/ai/what-are-large-language-models) in a local environment and includes a curated catalog of open source-licensed LLMs. Another example is the [Red Hat extension pack for Podman Desktop](https://developers.redhat.com/products/podman-desktop/red-hat-extension-pack), which helps developers work with specific Red Hat technologies such as [Red Hat OpenShift®](/en/technologies/cloud-computing/openshift).
Red Hat also offers an opinionated version of Podman Desktop. The [Red Hat build of Podman Desktop](https://developers.redhat.com/products/red-hat-build-podman-desktop) is a lightweight desktop application with built-in security controls for building, managing, and deploying containers on Linux, MacOS, and Windows. It boosts productivity by providing a consistent developer experience from your local machine to hybrid cloud production deployments and integrating with platforms like Red Hat OpenShift and Kubernetes.
Red Hat also  offers an opinionated version of Podman Desktop. The [Red Hat build of Podman Desktop](https://developers.redhat.com/products/red-hat-build-podman-desktop) is a lightweight desktop application with built-in security controls for building, managing, and deploying containers on Linux, MacOS, and Windows. It boosts productivity by providing a consistent developer experience from your local machine to hybrid cloud production deployments and integrating with platforms like Red Hat OpenShift and Kubernetes.
[Explore Red Hat Desktop](/en/products/desktop)
Podman, Buildah, and Skopeo
---------------------------
Podman is a modular container engine, so it must work alongside tools like Buildah and Skopeo to build and move its containers. With Buildah, you can build containers either from scratch or by using an image as a starting point. Skopeo moves container images between different types of storage systems, allowing you to copy images between registries like docker.io, quay.io, and your internal registry or between different types of storage on your local system. This modular approach to containerization results in a flexible, lightweight environment by reducing overhead and isolating the features you need. Working with containers makes it possible to use smaller, more modular tools that can focus on a single purpose and be updated as often as needed.
Think of Podman, Buildah, and Skopeo as a set of specialized Swiss Army knives. Combined, they can satisfy almost all container use cases. Podman is the biggest of these knives.
Podman and Buildah use [runC](https://github.com/opencontainers/runc#readme)―the OCI runtime―by default to launch containers. You can use runC to build and run an image, or you can use it to run Docker-formatted images. This Go language-based tool reads a runtime specification, configures the [Linux kernel](/en/topics/linux/what-is-the-linux-kernel), and eventually creates and starts container processes. With some configuration changes, you can also use Podman with other footprints like [crun](https://github.com/containers/crun#readme).
[Build UBI containers in GitHub Actions with Buildah and Podman](/en/blog/build-ubi-containers-github-actions-buildah-and-podman "Build UBI containers in GitHub Actions with buildah and podman")
Podman vs. Docker
-----------------
[Docker](/en/topics/containers/what-is-docker) is a containerization technology that allows the creation and use of [Linux containers](/en/topics/containers/whats-a-linux-container). The main difference between Podman and Docker is Podman’s daemonless architecture. Podman containers have always been rootless, while Docker only recently added a rootless mode to its daemon configuration. Docker is an all-in-1 tool for container creation and management, whereas Podman and its associated tools like Buildah and Skopeo are more specialized for specific aspects of containerization. This makes it possible to customize your environments with only the tools you need.
Podman is a powerful alternative to Docker, but the 2 can also work together. Users can easily switch between them by aliasing Docker to Podman (alias docker=podman) and vice versa. Additionally, an rpm called podman-docker can drop a “docker” into the system application path, which calls Podman for those environments where the “docker” command is needed, easing the transition from Docker. Podman’s CLI is similar to Docker’s, so users who are familiar with one are likely to have success with the other.
Some developers combine Podman and Docker, using Docker during the development stage and transferring their program to Podman in runtime environments.
Podman is best suited for developers running containers without Kubernetes or Red Hat OpenShift Container Platform. For Kubernetes container orchestration, developers can use the open source, community-driven container engine [CRI-O](https://cri-o.io/).
[Check out this video on rootless containers with Podman](https://youtu.be/N4ki5Sffy-E)
Why Podman?
-----------
Podman changed the container landscape by offering the same high-performance capabilities as leading container engines, but with the flexibility, accessibility, and security features that many development teams are seeking. Podman can help you:
* Manage container images and the full container lifecycle, including running, networking, checkpointing, and removing containers.
* Run and isolate resources for rootless containers and pods.
* Support OCI and Docker images as well as a Docker-compatible CLI.
* Create a daemonless environment to improve security and reduce idle resource consumption.
* Deploy a REST API to support Podman’s advanced functionality.
* Implement checkpoint/restore functionality for Linux containers with [Checkpoint/Restore in Userspace](https://criu.org/Main_Page) (CRIU). CRIU can freeze a running container and save its memory contents and state to disk so that containerized workloads can be restarted faster.
* Automatically update containers. Podman detects if an updated container fails to start and automatically rolls back to the last working version. This provides new levels of reliability for applications.
[Get hands on with Podman in this tutorial scenario](https://lab.redhat.com/tracks/podman-deploy)
[Configure a rootless Podman service](/en/configure-a-rootless-podman-service)
Red Hat can help
----------------
Podman is included with a [Red Hat Enterprise Linux](/en/technologies/linux-platforms/enterprise-linux) subscription so you can run OCI-compliant containers that are built using a trusted, supportable, and reliable universal base image (UBI). Red Hat Enterprise Linux is a standard for running Linux containers in enterprise environments. It allows developers to easily spin up containers, manage deployment, and speed development of new applications. [Upgrading your Red Hat Enterprise Linux infrastructure](/en/technologies/linux-platforms/enterprise-linux/upgrade-rhel) ensures that you're ready to take full advantage of these benefits. With portable applications and containers built on Red Hat Enterprise Linux across [open hybrid cloud](/en/technologies/linux-platforms/enterprise-linux/hybrid-cloud) environments, your organization can remain agile and continue to transform as your goals evolve.
The Red Hat Enterprise Linux web console simplifies the deployment and daily administration of your systems with an easy-to-use web interface. Podman is available as a component of the web console to help you manage containers and images. Monitor how much CPU and memory your containers use by accessing container hosts and monitoring system loads in the web console’s dashboard. The web console also lets you simplify common tasks and complex operations to streamline container management.
By using [Ansible Playbooks](/en/topics/automation/what-is-an-ansible-playbook), Red Hat Ansible® Automation Platform allows you to [automate Podman functions](https://www.redhat.com/sysadmin/automate-podman-ansible) like installation, container deployment, and other tasks that frequently consume time and resources.
Podman, Podman Desktop, and other open standards-based container tools make Red Hat Enterprise Linux a powerful container host that delivers production-grade support, stability, and security features as well as a path forward to Kubernetes and Red Hat OpenShift.
[Download the Universal Base Image ebook](https://connect.redhat.com/partner-resources/red-hat-ubi-ebook)
Resource
Red Hat named a Leader in 2025 Gartner® Magic Quadrant™ for Container Management
--------------------------------------------------------------------------------
Read the 2025 Gartner® Magic Quadrant™ for Container Management to learn why Red Hat OpenShift has been named a “Leader” for the 3rd year in a row.
[Read the report](/en/engage/gartner-magic-quadrant-container-management-analyst-report "Red Hat named a Leader in 2025 Gartner® Magic Quadrant™ for Container Management")
All Red Hat product trials
--------------------------
Our no-cost product trials help you gain hands-on experience, prepare for a certification, or assess if a product is right for your organization.
[Keep reading](/en/products/trials "All Red Hat product trials")
Keep reading
------------
### What is KVM?
Kernel-based virtual machines (KVM) are an open source virtualization technology that turns Linux into a hypervisor.
[Read the article](/en/topics/virtualization/what-is-KVM "article | what is KVM?")
### Ansible vs. Puppet: What you need to know
Ansible and Puppet are community open source IT automation tools. This article will help explain the similarities and differences between Ansible and Puppet in greater detail.
[Read the article](/en/topics/automation/ansible-vs-puppet "article | ansible vs puppet")
### Ansible vs. Salt: What you need to know
Ansible and Salt are community open source IT automation tools. This article will help explain the similarities and differences between Ansible and Salt in greater detail.
[Read the article](/en/topics/automation/ansible-vs-salt "article | ansible vs salt")
Open source resources
---------------------
### Related content
* Analyst material
  [Open Source Hybrid Cloud: Europe's Strategic Lever in the Age of Digital Sovereignty](/en/engage/idc-hybrid-cloud-digital-sovereignty-analyst-material)
* Analyst material
  [Open Source Hybrid Cloud: Europe's Strategic Lever in the Age of Digital Sovereignty](/en/resources/idc-hybrid-cloud-digital-sovereignty-analyst-material)
* Blog post
  [Save the date: Red Hat Summit 2027 is coming to Boston](/en/blog/save-date-red-hat-summit-2027-coming-boston)
* Blog post
  [Hardened, ready, and no cost: Container security evolved](/en/blog/red-hat-hardened-images)
### Related articles
* [What is KVM?](/en/topics/virtualization/what-is-KVM)
* [What is an image builder?](/en/topics/linux/what-is-an-image-builder)
* [Red Hat OpenShift for developers](/en/technologies/cloud-computing/openshift/developers)
* [What is a Linux container?](/en/topics/containers/whats-a-linux-container)
* [Why choose Red Hat for Kubernetes?](/en/topics/containers/why-choose-red-hat-kubernetes)
* [What is Linux?](/en/topics/linux/what-is-linux)
* [What is CaaS?](/en/topics/cloud-computing/what-is-caas)
* [Ansible vs. Puppet: What you need to know](/en/topics/automation/ansible-vs-puppet)
* [Ansible vs. Salt: What you need to know](/en/topics/automation/ansible-vs-salt)
* [Ansible vs. Chef: What you need to know](/en/topics/automation/ansible-vs-chef)
* [Ansible vs. Terraform](/en/topics/automation/ansible-vs-terraform)
* [What is Podman Desktop?](/en/topics/containers/what-is-podman-desktop)
* [Containers vs. VMs: Similarities, differences, and combined approaches](/en/topics/containers/containers-vs-vms)
* [Edge computing with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/edge-computing)
* [What is InstructLab?](/en/topics/ai/what-is-instructlab)
* [What is container orchestration?](/en/topics/containers/what-is-container-orchestration)
* [What is Istio?](/en/topics/microservices/what-is-istio)
* [What is CentOS Stream?](/en/topics/linux/what-is-centos-stream)
* [Stateful vs stateless applications](/en/topics/cloud-native-apps/stateful-vs-stateless)
* [What is Kubernetes?](/en/topics/containers/what-is-kubernetes)
* [Red Hat OpenShift on VMware](/en/technologies/cloud-computing/openshift/vmware)
* [What is KubeVirt?](/en/topics/virtualization/what-is-kubevirt)
* [Why use Red Hat Ansible Automation Platform with Red Hat OpenShift?](/en/technologies/cloud-computing/openshift/ansible-on-openshift)
* [What is CentOS?](/en/topics/linux/what-is-centos)
* [What are CentOS replacements?](/en/topics/linux/centos-alternatives)
* [What are hosted control planes?](/en/topics/containers/what-are-hosted-control-planes)
* [What is the Kubernetes Java client?](/en/topics/cloud-computing/what-is-kubernetes-java-client)
* [What is kubernetes security?](/en/topics/containers/kubernetes-security)
* [What is Helm?](/en/topics/devops/what-is-helm)
* [What is Argo CD?](/en/topics/devops/what-is-argocd)
* [What is MicroShift?](/en/topics/edge-computing/microshift)
* [How Kubernetes can help AI/ML](/en/topics/cloud-computing/how-kubernetes-can-help-ai)
* [OpenJDK versus Oracle JDK](/en/topics/application-modernization/openjdk-vs-oracle-jdk)
* [What is Cloud Foundry?](/en/topics/application-modernization/what-is-cloud-foundry)
* [What is Kubeflow?](/en/topics/cloud-computing/what-is-kubeflow)
* [What are microservices?](/en/topics/microservices/what-are-microservices)
* [What is container security?](/en/topics/security/container-security)
* [OpenShift vs. OpenStack: What are the differences?](/en/technologies/cloud-computing/openshift/openshift-vs-openstack)
* [What are sandboxed containers](/en/topics/containers/sandboxed-containers)
* [What is Buildah?](/en/topics/containers/what-is-buildah)
* [Kubernetes vs OpenStack](/en/topics/openstack/kubernetes-vs-openstack)
* [What are validated patterns?](/en/topics/cloud-computing/what-are-validated-patterns)
* [Understanding Ansible, Terraform, Puppet, Chef, and Salt](/en/topics/automation/understanding-ansible-vs-terraform-puppet-chef-and-salt)
* [Kubernetes on AWS: Self-Managed vs. Managed Applications Platforms](/en/topics/containers/kubernetes-on-aws)
* [What's the best Linux distro for you?](/en/topics/linux/whats-the-best-linux-distro-for-you)
* [Red Hat OpenShift vs. OKD](/en/topics/containers/red-hat-openshift-okd)
* [Red Hat OpenShift vs. Kubernetes: What's the difference?](/en/technologies/cloud-computing/openshift/red-hat-openshift-kubernetes)
* [Why run Apache Kafka on Kubernetes?](/en/topics/integration/why-run-apache-kafka-on-kubernetes)
* [What is high availability and disaster recovery for containers?](/en/topics/containers/high-availability-containers)
* [What is Apache Kafka?](/en/topics/integration/what-is-apache-kafka)
* [Spring on Kubernetes with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/spring)
* [What is a golden image?](/en/topics/linux/what-is-a-golden-image)
* [Ansible vs. Red Hat Ansible Automation Platform](/en/technologies/management/ansible/ansible-vs-red-hat-ansible-automation-platform)
* [What are Red Hat OpenShift cloud services?](/en/technologies/cloud-computing/openshift/what-are-red-hat-openshift-cloud-services)
* [VNF and CNF, what’s the difference?](/en/topics/cloud-native-apps/vnf-and-cnf-whats-the-difference)
* [What is a container registry?](/en/topics/cloud-native-apps/what-is-a-container-registry)
* [What is Skopeo?](/en/topics/containers/what-is-skopeo)
* [What are Red Hat OpenShift Operators?](/en/technologies/cloud-computing/openshift/what-are-openshift-operators)
* [Using Helm with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/helm)
* [Kubernetes security best practices](/en/topics/containers/kubernetes-security-best-practices)
* [What is Grafana?](/en/topics/data-services/what-is-grafana)
* [Orchestrating Windows containers on Red Hat OpenShift](/en/technologies/cloud-computing/openshift/windows-containers-on-red-hat-openshift)
* [What is open source software?](/en/topics/open-source/what-is-open-source-software)
* [What is a Kubernetes operator?](/en/topics/containers/what-is-a-kubernetes-operator)
* [Open source vs. proprietary software in vehicles](/en/topics/open-source/open-source-vs-proprietary-software-in-vehicles)
* [High performance computing with Red Hat OpenShift](/en/technologies/cloud-computing/openshift/high-performance-computing)
* [Advantages of Kubernetes-native security](/en/topics/containers/advantages-of-kubernetes-native-security)
* [What is KubeLinter?](/en/topics/containers/what-is-kubelinter)
* [Intro to Kubernetes security](/en/topics/containers/intro-kubernetes-security)
* [Container and Kubernetes compliance considerations](/en/topics/containers/compliance)
* [How microservices support IT integration in healthcare](/en/topics/microservices/microservices-in-healthcare)
* [Kubernetes cluster management](/en/technologies/cloud-computing/openshift/kubernetes-cluster-management)
* [Red Hat OpenShift on IBM IT infrastructure](/en/technologies/cloud-computing/openshift/what-is-red-hat-openshift-on-IBM-IT-infrastructure)
* [Red Hat OpenShift for business leaders](/en/technologies/cloud-computing/openshift/business-leaders)
* [How to deploy Red Hat OpenShift](/en/technologies/cloud-computing/openshift/deploy-red-hat-openshift)
* [Cost management for Kubernetes on Red Hat OpenShift](/en/technologies/cloud-computing/openshift/cost-management)
* [What makes Red Hat OpenShift the right choice for IT operations?](/en/technologies/cloud-computing/openshift/it-operations)
* [What makes Red Hat OpenShift the right choice for SAP?](/en/technologies/cloud-computing/openshift/sap)
* [Kubernetes-native Java development with Quarkus](/en/technologies/cloud-computing/openshift/quarkus)
* [What is enterprise Kubernetes?](/en/topics/containers/what-is-enterprise-kubernetes)
* [What is RKT?](/en/topics/containers/what-is-rkt)
* [What is Kubernetes role-based access control (RBAC)](/en/topics/containers/what-kubernetes-role-based-access-control-rbac)
* [What is Kogito?](/en/topics/automation/what-is-kogito)
* [What is containerization?](/en/topics/cloud-native-apps/what-is-containerization)
* [What was CoreOS and CoreOS container Linux](/en/technologies/cloud-computing/openshift/what-was-coreos)
* [Learning Kubernetes basics](/en/topics/containers/learning-kubernetes-tutorial)
* [What is service-oriented architecture?](/en/topics/cloud-native-apps/what-is-service-oriented-architecture)
* [What is the Kubernetes API?](/en/topics/containers/what-is-the-kubernetes-api)
* [What is Kubernetes cluster management?](/en/topics/containers/what-is-kubernetes-cluster-management)
* [What is a Kubernetes deployment?](/en/topics/containers/what-is-kubernetes-deployment)
* [Why choose the Red Hat build of Quarkus?](/en/topics/cloud-native-apps/why-choose-red-hat-quarkus)
* [Introduction to Kubernetes architecture](/en/topics/containers/kubernetes-architecture)
* [Introduction to Kubernetes patterns](/en/topics/cloud-native-apps/introduction-to-kubernetes-patterns)
* [What is a Kubernetes cluster?](/en/topics/containers/what-is-a-kubernetes-cluster)
* [What is Quarkus?](/en/topics/cloud-native-apps/what-is-quarkus)
* [What is Jaeger?](/en/topics/microservices/what-is-jaeger)
* [What is open source?](/en/topics/open-source/what-is-open-source)
* [What is Clair?](/en/topics/containers/what-is-clair)
* [What is Knative?](/en/topics/microservices/what-is-knative)
* [What is etcd?](/en/topics/containers/what-is-etcd)
* [What is container-native virtualization?](/en/topics/containers/what-is-container-native-virtualization)
* [Why choose Red Hat for microservices?](/en/topics/microservices/why-choose-red-hat-microservices)
* [Why choose Red Hat for containers?](/en/topics/containers/why-choose-red-hat-containers)
* [What is Docker?](/en/topics/containers/what-is-docker)
* [What is a Kubernetes pod?](/en/topics/containers/what-is-kubernetes-pod)
[More about this topic](/en/topics/open-source "More about this topic")