# podup
[](https://github.com/Glyndor/podup/actions/workflows/ci.yml)
[](https://github.com/Glyndor/podup/actions/workflows/release.yml)
**podup** runs your `docker-compose.yml` on rootless Podman โ a single static
binary, written in Rust, with no daemon and no Python runtime.
```mermaid
flowchart LR
A["docker-compose.yml"] --> B["podup"]
B -->|"parse ยท substitute ยท order"| C["Podman REST API"]
C --> D["containers"]
C --> E["networks"]
C --> F["volumes"]
```
## โจ Features
- ๐ **Drop-in workflow** โ `up`, `down`, `start`, `stop`, `ps`, `logs`, `exec`, `run`, `cp`, `build`, `pull`, `restart`, `rm`, `kill`, `pause`, `unpause`, `top`, `port`, `images`, `config`, `watch`
- ๐ **Rootless by design** โ drives rootless Podman over its native libpod REST API
- ๐ **Compose-spec parsing** โ YAML anchors, `extends`, `include`, profiles, `env_file`, variable substitution with modifiers
- ๐ **Dependency-aware** โ `depends_on` ordering with `service_started`, `service_healthy`, and `service_completed_successfully` conditions
- ๐ข **Replicas** โ `scale:` and `deploy.replicas` with named replica containers
- ๐ **Secrets & configs** โ inline content, file, and environment sources staged securely
- ๐ **Watch mode** โ sync, rebuild or restart services on file changes per `develop.watch` rules
- ๐ฆ **Single binary** โ statically musl-linked on Linux, no runtime dependencies
- ๐ฆ **Library too** โ embed the parser and engine in your own Rust project
## ๐ฅ Install
```bash
Binaries for Linux and macOS (x86_64 and arm64) plus Windows (x86_64),
SHA-256 verified, with build provenance attestations. On macOS and Windows,
podup talks to the `podman machine` VM through its host-side socket or named
pipe. Windows users download `podup-windows-x86_64.exe` from the
[releases page](https://github.com/Glyndor/podup/releases) directly. Or build
from source:
```bash
cargo build --release
```
### Updating
```bash
podup update # download and install the latest signed release
podup update --check # report whether a newer release exists, install nothing
```
`podup update` replaces the running binary in place, but only after verifying
the release's Ed25519 signature against the public key embedded in your build
and matching its SHA-256 checksum. It fails closed: a bad signature, missing
key, or checksum mismatch aborts before the installed binary is touched. See
[docs/self-update.md](docs/self-update.md) for the trust model. Installing into
a system directory (e.g. `/usr/local/bin`) needs elevation โ re-run with `sudo`.
## ๐ Quick start
```bash
podup up --detach # docker-compose.yml in the current directory
podup -f stack.yml -p myapp up -d # explicit file and project name
podup ps # list project containers
podup logs api --follow # follow one service's logs
podup down --volumes # tear down, removing named volumes
```
## โ๏ธ vs. alternatives
| Engine | rootless Podman | Docker daemon | Podman |
| Runtime | single static binary | Go binary + Docker daemon | Python + pip packages |
| Root required | no | typically yes (daemon) | no |
| Implementation | Rust | Go | Python |
## ๐ฆ Library usage
```rust
use podup::{parse_file, podman, Engine};
#[tokio::main]
async fn main() -> podup::Result<()> {
let file = parse_file(std::path::Path::new("docker-compose.yml"))?;
let client = podman::connect(None)?;
let engine = Engine::new(client, "myproject".to_string());
engine.up(&file).await?;
Ok(())
}
```
```toml
[dependencies]
podup = { git = "https://github.com/Glyndor/podup", tag = "v0.5.8" }
```
## ๐ Docs
- [Migrating from Docker Compose](docs/docker-migration.md) โ compatibility guide, rootless differences, deprecated fields
- [Debian packaging](docs/debian-packaging.md) โ building and distributing a `.deb`
## Contributing & security
See the org-wide [contributing guide](https://github.com/Glyndor/.github/blob/main/CONTRIBUTING.md).
Report vulnerabilities privately via the Security tab โ never in a public issue.
## License
[Apache-2.0](LICENSE)