The following table shows the feature implementation status of Rootless Podman:
|Pre-1.1||Initial support for Rootless mode|
|1.1||Added support for port forwarding (
|1.5||Added support for cgroup v2|
|2.1||Added support for multi-container networking (
FAQ: Docker/Moby vs Podman?
Until recently, Docker/Moby had lacked support for cgroup v2, and on the other hand Podman had lacked support for multi-container networking.
As of October 2020, the two projects implement almost the same features with regard to the support for Rootless mode.
Please read the common steps first.
The easiest way to install Rootless Podman is to install
$ sudo dnf install -y podman
Rootless Podman could also be installed without
sudo in theory.
However, as of October 2020, there is no official Podman binaries that can be installed
$ podman run docker.io/library/hello-world
Resource-related flags of
podman run, such as
--pids-limit can be used only when the following conditions are satisfied:
- Podman version is 1.5 later
- runc version is 1.0-rc91 or later, or crun is installed
- The host is running with cgroup v2
- The host is running with systemd
To impose resource limitations without cgroup, see https://docs.docker.com/engine/security/rootless/#limiting-resources (read
Podman uses RootlessKit as the default port forwarder.
However, as explained in How it works, sometimes slirp4netns port forwarder is preferred over RootlessKit port forwarder.
To change the port forwarder to slirp4netns, run
podman run with
As Podman lacks the central daemon, you need to create systemd unit files to launch the each of the containers on the system startup.
Also, you need to run
sudo loginctl enable-linger .... See Getting Started/Login.
Run the following commands to remove all containers and configurations:
$ podman rm -f $(podman ps -a -q) $ podman unshare rm -rf ~/.local/share/containers ~/.config/containers
To uninstall binaries, remove
podman package with the package manager.