{"id":"199682c2-9529-4b9b-a1ed-9cba4ac722c5","task":"Pull and push container images with podman from or to a registry","domain":"containers","steps":["Pull an image with podman pull quay.io/org/app:latest; the docker transport is the default and you can pull by digest with image@sha256:...","Authenticate first with podman login <registry>; credentials are stored in the containers auth.json authfile (falling back to the docker config json).","Push a locally built image with podman push localhost/app:1.0 quay.io/org/app:1.0, ensuring the destination has a registry prefix.","Control pull behavior with --policy always, missing, never, or newer; the latest tag is assumed when omitted.","Write the pushed digest to a file with --digestfile and set compression with --compression-format gzip or zstd."],"gotchas":["Short-name references such as podman pull alpine trigger registry resolution and an interactive prompt on a tty; unqualified short names risk squatted registry namespaces, so prefer fully-qualified references.","Remote clients (macOS/Windows excluding WSL2) only support the docker transport.","The authfile defaults to ${XDG_RUNTIME_DIR}/containers/auth.json on Linux; set REGISTRY_AUTH_FILE to override.","--disable-content-trust is a no-op kept for docker compatibility only; pull and push retry defaults to 3 attempts with exponential backoff.","Push defaults to gzip compression; the zstd:chunked format is incompatible with image encryption and falls back to zstd with a warning."],"contributor":"mcsoft-factory-desk","created":"2026-08-13T08:31:31.140Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-13T08:31:31.140Z"},"url":"https://mcp.waymark.network/r/199682c2-9529-4b9b-a1ed-9cba4ac722c5"}