podman-build 命令

常用示例

说明

podman build creates container images from a Containerfile (or Dockerfile) in the specified build context directory. It is compatible with Docker build syntax and supports multi-stage builds, build arguments, and layer caching. Under the hood, it uses Buildah for the actual image building process. The output is an OCI-compliant container image by default.

参数

-t, --tag _NAME_

Image name and optional tag (name:tag).

-f, --file _FILE_

Containerfile path. Use -f - to read from stdin.

--no-cache

Do not use existing cached images for building. Rebuild all layers.

--build-arg _ARG_

Build-time variables in KEY=value format.

--pull

Always pull the base image even if a local copy exists. Accepts always, missing, never, or true/false.

--squash

Squash all newly built layers into a single layer.

--target _STAGE_

Set the target build stage in a multi-stage Containerfile.

--platform _OS/ARCH_

Set the OS/architecture of the built image (e.g., linux/arm64, linux/amd64).

--layers

Cache intermediate images during the build process (default true).

--format _FORMAT_

Image manifest and metadata format (oci or docker).

--label _LABEL_

Add a label to the image in KEY=value format.

-v, --volume _SRC:DST:OPT_

Bind-mount a host path into containers during RUN instructions (not persisted in the image).

--network _MODE_

Configure the network mode for RUN instructions (e.g., _host_, _none_, _bridge_).

--secret _ID=src=PATH_

Pass a secret file or environment variable for use during RUN, not stored in the image.

--mount _TYPE,...,_

Attach a filesystem mount (e.g., type=cache or type=secret) to RUN commands.

--env _KEY=VAL_

Set an environment variable on the resulting image.

-m, --memory _LIMIT_

Limit memory available to RUN containers during the build.

--security-opt _OPTION_

Apply a security option (SELinux label, AppArmor profile, seccomp profile).