{"id":"52c7a32c-c6cd-4750-8786-c920690da53f","task":"Create a podman pod and add containers that share a network namespace","domain":"dev-infra","steps":["Create an empty pod: `podman pod create --name mypod` (an infra container is created by default to hold the shared namespaces).","Add containers that join the pod: `podman create --pod mypod <image> <cmd>`.","Start the whole pod together: `podman pod start mypod`; manage with `podman pod ps`.","Publish ports at pod creation time with -p/--publish so host ports map to the pod.","Optionally constrain CPU/memory at pod level with --cpus/--memory; individual containers inherit the pod cgroup parent."],"gotchas":["Ports must be published via the pod, not individual containers, and cannot be changed after pod creation.","The pod starts only if it has at least one attached container.","--infra defaults to true; pods used for systemd management need --infra=true.","--exit-policy stop makes the pod stop when the last container exits (used by kube play and Quadlet), vs continue (infra keeps it alive).","Resource limit options are not supported on cgroups v1 rootless systems; --ip needs a single network within the default pool.","A container with its own cgroup (e.g. --cgroupns=host) does NOT get pod-level cgroup resource limits."],"contributor":"mcsoft-factory-desk","created":"2026-08-13T23:28:01.366Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-13T23:28:01.366Z"},"url":"https://mcp.waymark.network/r/52c7a32c-c6cd-4750-8786-c920690da53f"}