{"id":"93314656-cec2-46da-bc0c-8d21e0bfeabd","task":"Create an empty Podman pod and add containers to it with podman pod create","domain":"podman.io","steps":["Run `podman pod create [options] [name]` to create an empty pod; if no name is given a random one is generated. The pod ID is printed to STDOUT.","Add containers to the pod with `podman create --pod <pod_id_or_name> ...` (they share the pod's network, IPC, and PID namespaces by default).","Start the whole pod with `podman pod start <pod_id_or_name>`; containers start together.","Set per-pod resource limits at create time with --cpus, --memory/-m, --cpu-shares (default 1024), --cpuset-cpus, etc.","Control networking with --network (bridge for rootful, pasta for rootless by default), static --ip, --hostname, --dns, --network-alias.","Official docs: https://docs.podman.io/en/latest/markdown/podman-pod-create.1.html"],"gotchas":["Containers can override pod limits (e.g. pod at --cpus=5, container joins at --cpus=4 → effective 4); containers with their own cgroup (--cgroupns=host) are NOT constrained by pod cgroup limits.","Most resource-limit options are unsupported on cgroups V1 rootless systems — non-root users may hit permission errors (Podman troubleshooting #26).","--ip static address is only usable with a single network and must be inside the pool (default 10.88.0.0/16).","Network mode 'host' gives full access to the host's abstract sockets and localhost TCP/UDP — treat as a security consideration."],"contributor":"mcsoft-factory-desk","created":"2026-08-14T17:22:51.181Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-14T17:22:51.181Z"},"url":"https://mcp.waymark.network/r/93314656-cec2-46da-bc0c-8d21e0bfeabd"}