otty / dotfiles

All tools/Podman

Podman

podman

Manage containers, pods, and images with Podman.

Detected by podman | macOS, Linux, Windows |podman.io

Sync it podman.toml

Sync rules

What travels, what stays, what never leaves

Podman in your home directory Every rule on this page, by file

· containers.conf Sync

· containers.conf.d/ Sync

storage.graphrootstorage.runroot

Each machine keeps its own copy of these.

· registries.conf Sync

· policy.json Sync

· auth.json Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/podman.tomlThe file this page is generated from

id = "podman"

name = "Podman"

homepage = "https://podman.io"

description = "Manage containers, pods, and images with Podman."

icon = "theSVG:podman"

detect = ["podman"]

# containers.conf(5) (containers/common/docs/containers.conf.5.md), FILES: "For

# user specific configuration it reads $XDG_CONFIG_HOME/containers/containers.conf

# and $XDG_CONFIG_HOME/containers/containers.conf.d/*.conf files. When

# $XDG_CONFIG_HOME is not set it falls back to using $HOME/.config instead."

# The same page: "Rootless users can override fields in the storage config by

# creating $HOME/.config/containers/storage.conf".

# containers-registries.conf(5): "Container engines will use the

# $HOME/.config/containers/registries.conf if it exists".

# containers-policy.json(5): "The policy is read from

# $XDG_CONFIG_HOME/containers/policy.json (or from

# $HOME/.config/containers/policy.json if $XDG_CONFIG_HOME is unset)".

# https://github.com/containers/podman/blob/main/docs/tutorials/podman-for-windows.md

# names the Windows user-scope spelling: %APPDATA%\containers\containers.conf,

# with drop-ins in %APPDATA%\containers\containers.conf.d. $XDG_CONFIG_HOME on

# every Unix including macOS, %APPDATA% on Windows, is [configHome].

# Listed file by file rather than as the whole containers directory: auth.json

# lives there too (see secret), and so does the local podman machine state,

# which is this laptop's VM, not configuration.

paths = [

"[configHome]/containers/containers.conf",

"[configHome]/containers/containers.conf.d/",

"[configHome]/containers/storage.conf",

"[configHome]/containers/registries.conf",

"[configHome]/containers/policy.json",

]

exclude = []

# containers-auth.json(5): the file `podman login` writes is

# ${XDG_RUNTIME_DIR}/containers/auth.json on Linux and

# $HOME/.config/containers/auth.json on Windows and macOS, and

# ${XDG_CONFIG_HOME}/containers/auth.json is searched on every platform. It is

# registry usernames and tokens throughout. Only the config-directory spelling

# can be named here — a consumer cannot resolve $XDG_RUNTIME_DIR from this data.

secret = ["[configHome]/containers/auth.json"]

# storage.conf is TOML, and graphroot and runroot are absolute paths into this

# machine's disk (a rootless user's ~/.local/share/containers/storage, a

# system's /var/lib/containers). Podman derives them itself when they are

# absent, so they must not travel. The name does not end in .toml, hence the

# explicit format.

# A line here is the user pointing container storage at a volume of their own,

# which is exactly what they would want back when rebuilding this machine.

[[machine_lines]]

file = "[configHome]/containers/storage.conf"

format = "toml"

match = { key_path = ["storage.graphroot", "storage.runroot"] }

scope = "backup"

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/podman. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps the credential file out. None of them splits storage.graphroot and storage.runroot for you — that part is Otty’s own sync, or a template you write by hand.