Skip to content

Run Omnigent with Podman

run.sh starts Omnigent under rootless Podman on the current directory, passing any arguments to omnigent.

Images: GHCRghcr.io/hambn/omnigent
Docker Hubdocker.io/hambn/omnigent
Use case: Rootless agent orchestration on a workstation
Upstream: github.com/omnigent-ai/omnigent (opens in new tab)
Source: tools/ai/omnigent/docs/podman (opens in new tab)

On this page

Prerequisites
Run Omnigent
Variables
Workspace
Files
File contents
run.sh

Prerequisites

Rootless Podman 4.3 or later, for --userns=keep-id:uid=1000,gid=1000.
A model credential, such as ANTHROPIC_API_KEY or OPENAI_API_KEY.

Run Omnigent

run.sh passes no environment. Add -e ANTHROPIC_API_KEY or -e OPENAI_API_KEY to its podman run line, then:

Shell

export ANTHROPIC_API_KEY=sk-ant-...
./run.sh

Omnigent's settings are removed with the container, and its web UI on port 6767 is not published.

Variables

Variable	Required	Purpose
`OMNIGENT_IMAGE`	no	Image to run. Defaults to `ghcr.io/hambn/omnigent:ubuntu-browser`; set a digest reference to pin one build.

Workspace

The current directory is mounted at /workspace with :Z, so SELinux hosts relabel it for the container. --userns=keep-id maps your host user to sysadmin (UID 1000), so files Omnigent writes stay owned by you.

Files

run.sh runs the published image with rootless Podman.

File contents

run.sh8 lines

#!/usr/bin/env bash
# Run Omnigent rootlessly against the current directory; :Z relabels it on SELinux hosts.
set -euo pipefail

image=${OMNIGENT_IMAGE:-ghcr.io/hambn/omnigent:ubuntu-browser}
podman run -it --rm --userns=keep-id:uid=1000,gid=1000 \
    -v "$PWD:/workspace:Z" \
    "$image" "$@"

Topics