Skip to content

Run agentbloat with Podman

run.sh opens a Zsh login shell in agentbloat under rootless Podman, with the current directory mounted at /workspace.

Images: GHCRghcr.io/hambn/agentbloat
Docker Hubdocker.io/hambn/agentbloat
Use case: Rootless multi-agent workstation
Source: tools/ai/agentbloat/docs/podman (opens in new tab)

On this page

Prerequisites
Open a shell
Variables
Workspace
Files
File contents
run.sh

Prerequisites

Rootless Podman 4.3 or later, for --userns=keep-id:uid=1000,gid=1000.

Open a shell

Shell

./run.sh
cd /workspace

Run any agent and sign in from its prompt. To pass an API key instead, add -e OPENAI_API_KEY or another variable to the podman run line in run.sh. Logins are removed with the container when you exit.

Variables

Variable	Required	Purpose
`AGENTBLOAT_IMAGE`	no	Image to run. Defaults to `ghcr.io/hambn/agentbloat:ubuntu-browser`; set a digest reference to pin one build.

Workspace

The current directory is mounted at /workspace with :Z, so SELinux hosts relabel it for the container. --userns=keep-id maps your host user to sysadmin (UID 1000), so files the agents write stay owned by you.

Files

run.sh runs the published image with rootless Podman.

File contents

run.sh8 lines

#!/usr/bin/env bash
# Run an interactive agentbloat shell rootlessly against the current directory; :Z relabels it on SELinux hosts.
set -euo pipefail

image=${AGENTBLOAT_IMAGE:-ghcr.io/hambn/agentbloat:ubuntu-browser}
podman run -it --rm --userns=keep-id:uid=1000,gid=1000 \
    -v "$PWD:/workspace:Z" \
    "$image" "$@"

Topics