Podman Container Engine

  1. Core Architecture and Concepts
    1. Container Runtime Architecture
      1. OCI Runtime Specification
        1. Container Lifecycle Management
          1. Runtime Interface Standards
            1. Compliance Requirements
            2. Fork-Exec Process Model
              1. Process Creation and Management
                1. Resource Isolation
                  1. Security Implications
                  2. Container Runtime Selection
                    1. runc Features and Usage
                      1. crun Performance Benefits
                        1. Runtime Comparison
                      2. Security Model
                        1. Rootful vs Rootless Operation
                          1. User Namespace Mapping
                            1. Privilege Management
                              1. Security Trade-offs
                              2. Linux Security Features
                                1. SELinux Integration
                                  1. AppArmor Support
                                    1. Seccomp Profiles
                                    2. Capability Management
                                      1. Default Capabilities
                                        1. Capability Modification
                                          1. Security Best Practices
                                        2. Storage Architecture
                                          1. Container Storage Interface
                                            1. Storage Driver Types
                                              1. Layer Management
                                                1. Copy-on-Write Mechanics
                                                2. Image Storage
                                                  1. Layer Structure
                                                    1. Image Metadata
                                                      1. Storage Optimization
                                                      2. Volume Management
                                                        1. Named Volumes
                                                          1. Bind Mounts
                                                            1. tmpfs Mounts
                                                          2. Networking Architecture
                                                            1. Container Network Interface
                                                              1. CNI Plugin System
                                                                1. Network Configuration
                                                                  1. Plugin Selection
                                                                  2. Network Modes
                                                                    1. Bridge Networking
                                                                      1. Host Networking
                                                                        1. None Networking
                                                                        2. Rootless Networking
                                                                          1. slirp4netns Implementation
                                                                            1. pasta Networking
                                                                              1. Port Forwarding