Help us improve
Share bugs, ideas, or general feedback.
How this skill is triggered — by the user, by Claude, or both
Slash command
/hatch3r:hatch3r-cli-podmanThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
<!-- HATCH3R-CLI-SKILL-GENERATED v1 -->
Builds, runs, and manages containers using the Docker CLI. Automatically activated when image builds, container runs, exec inspections, or registry pushes are needed.
Assists with Podman for daemonless rootless containers, pods, Containerfiles, podman-compose, systemd services, OCI images, secrets, and Docker-compatible workflows.
Docker and Podman container management: Dockerfile optimization, multi-stage builds, Compose v2 orchestration, networking, volumes, security hardening, supply chain integrity, health checks, resource limits, Quadlet systemd integration, and debugging. Invoke whenever task involves any interaction with containers — writing Dockerfiles, configuring Compose, managing Podman Quadlets, reviewing container security, debugging container issues, or setting up image signing and scanning.
Share bugs, ideas, or general feedback.
Daemonless container engine, rootless by default (Docker alternative)
Reach for podman when the task is in the container category and the agent would otherwise call an MCP tool or read large outputs into context.
CLI tools return structured stdout that fits in <1KB for typical queries; equivalent MCP calls regularly exceed 10KB. Reference: Anthropic engineering (Nov 4 2025) — code-execution-over-MCP yields 98.7% token reduction.
podman build -t myapp:dev .
Build an image from the local Dockerfile — same CLI surface as docker build.
podman run --rm -v "$PWD:/app:Z" -w /app node:22 npm test
Run a one-shot container with the working directory bind-mounted; the :Z suffix triggers SELinux relabel on Fedora/RHEL hosts.
podman compose up
Run a compose.yaml workflow under podman — uses the podman-compose plugin or docker-compose adapter.
podman run --userns=keep-id -v "$PWD:/work" myapp
Preserve the host UID inside the rootless container so written files do not end up owned by a high-mapped UID.
podman system service --time=0 &
Expose a docker-API-compatible socket so docker-only tooling (e.g. testcontainers) can talk to podman unchanged.
hatch3r-cli-docker (tier 2) is the established path for Swarm and Docker Desktop integration; podman's swarm support is minimal./var/run/docker.sock: unless you start podman system service, those tools fail.| Tool | When to prefer |
|---|---|
hatch3r-cli-docker (tier 2) | Mainstream CI, Docker Desktop, Swarm, broad ecosystem assumptions |
| nerdctl + containerd | Kubernetes-aligned runtime, OCI-faithful CLI |
| buildah | Image builds without a full container runtime (rootless, scriptable) |
Verify with:
command -v podman
Install (mac):
# brew
brew install podman
Homepage: https://podman.io/