Skip to main content
emisar

Podman containers

v0.1.12

Read-only inventory + per-container introspection plus narrow mutators (restart, stop, kill, prune). Drop-in alternative for Docker on RHEL / Fedora hosts. Rootless mode supported as long as the runner uid matches the user that owns the containers.

7 allowed by default 5 need approval by default
Pack ID
podman
Vendor
emisar
OS
linux
Actions
12
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
podman

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install podman --hash sha256:8f9881cdd148d9836d57df2505c4b56cedc4d930a58a77573bcf70d479f0a337

Setup

Drives the local podman CLI on the runner host — no credentials needed.

Host access

Run these commands yourself on the runner host. Emisar shows and copies setup recipes; it never runs them.

Reach rootful or system-wide Podman containers as root.

podman.infopodman.pspodman.inspectpodman.logspodman.statspodman.imagespodman.system_dfpodman.restartpodman.stoppodman.killpodman.system_prune

Run the Emisar service as root for rootful Podman

Grant access 
sudo install -d -m 0755 /etc/systemd/system/emisar.service.d
printf '%s\n' '[Service]' 'User=root' 'Group=root' | sudo tee /etc/systemd/system/emisar.service.d/10-podman-root.conf >/dev/null
sudo systemctl daemon-reload
sudo systemctl restart emisar
Verify access 
test "$(systemctl show emisar --property=User --value)" = root
sudo podman info >/dev/null

Impact: Every Emisar action on this runner executes as root and can read or change all rootful containers and the host resources they can mount.

Notes

  • Rootless containers require a dedicated runner installed as their owner. The setup recipe cannot name that deployment-specific identity safely.

Verify it works

Runs podman.ps, a low-risk read that confirms the pack can reach its target. Run it on the host once the pack is installed; pack install runs it for you.

on the runner host 
sudo emisar pack verify podman

Install and configure a pack walks through the whole sequence on a host.

Actions 12 total

View on GitHub
  • podman.images exec low Low — read-only or trivially reversible

    podman images

    List all local images.

    View source on GitHub
  • podman.info exec low Low — read-only or trivially reversible

    podman info

    Show system + storage + network info.

    View source on GitHub
  • podman.inspect exec high High — service-affecting

    podman inspect <id>

    Show full container details for one ID/name — state, mounts, network config, labels, and the container's env. The env commonly carries injected secrets (values passed with -e), so this is approval-gated; the runner's redaction is a pattern-bound backstop, not a guarantee. Read-only.

    View source on GitHub
  • podman.kill exec high High — service-affecting

    podman kill <id>

    Send SIGKILL: instant termination. In-flight requests are dropped.

    View source on GitHub
  • podman.logs exec medium Medium — changes state, easily reversible

    podman logs <id> --tail <N>

    Tail container logs (last N lines).

    View source on GitHub
  • podman.ps exec low Low — read-only or trivially reversible

    podman ps -a

    List all containers (running + stopped).

    View source on GitHub
  • podman.restart exec high High — service-affecting

    podman restart <id>

    Restart one container. Drops in-flight requests.

    View source on GitHub
  • podman.stats exec low Low — read-only or trivially reversible

    podman stats --no-stream

    Show one-shot CPU/mem/net/io stats for all containers.

    View source on GitHub
  • podman.stop exec high High — service-affecting

    podman stop <id>

    SIGTERM then SIGKILL after timeout.

    View source on GitHub
  • podman.system_df exec low Low — read-only or trivially reversible

    podman system df

    Show disk usage by images / containers / volumes.

    View source on GitHub
  • podman.system_prune exec high High — service-affecting

    podman system prune -f

    Remove stopped containers, dangling images, unused networks.

    View source on GitHub
  • podman.version exec low Low — read-only or trivially reversible

    podman version

    Show Podman binary + API + runtime versions.

    View source on GitHub
← Back to registry
Pack reference  Publish your own