podman
Hosting a simple PHP page with Podman + Caddy, with automatic HTTPS - 2026-09-05
I wanted to serve a small PHP page with a real Let's Encrypt certificate, without installing PHP, a web server, or certbot on the host. Two rootless Podman containers do the whole job: Caddy as reverse proxy (it manages the certificate itself) talking FastCGI to a plain php-fpm…
Moving a container image between hosts with podman save + scp + load, no registry - 2026-09-05
Sometimes the easiest way to get an image onto another machine isn't pushing it to a registry — especially for a one-off image, or a homelab box with no registry set up at all. podman save / podman load round-trips an image through a plain tar file, and scp is the only thing in…
Sanity-checking a fresh Docker or Podman install with each engine's own hello-world - 2026-09-06
After installing either engine, the fastest way to confirm pull + run + registry access all actually work end-to-end is each project's own tiny smoke-test image — no Dockerfile, no app code, just "did this work."
Podman equivalents to Docker's Dive image-layer explorer - 2026-09-12
There's no single Podman subcommand that reproduces Dive's interactive layer browser and wasted-space score. But Dive itself already speaks Podman natively, and Podman's own commands cover most of what Dive shows — just split across a few of them instead of one UI.
Root vs rootless Podman on RHEL 10 and Ubuntu 26.04 - 2026-09-13
Podman has no daemon either way — root and rootless are two different ways of running the same podman binary, distinguished by whether the containers it starts get a real root-owned process on the host or one mapped into a Linux user namespace. Same commands, same image format;…
Auto-updating the Caddy/Adminer/PHP Quadlet stack needs more than one AutoUpdate key - 2026-09-21
The hand-written Quadlet entry got Caddy and PHP-FPM surviving reboots, and the linux-system-roles version added Adminer on top of the same idea, deployed declaratively. The next obvious step is having all three pick up new image versions on their own, and Podman ships that as…
Pointing Podman at an Artifactory mirror without editing a single image name - 2026-09-21
Putting a local Artifactory in front of Docker Hub has two quite different implementations, and the choice decides whether every unit file on every host has to be rewritten. The interesting parts — which one keeps the files portable, what happens when the mirror doesn't have…