# Containers and Pods::: {.callout-note}Rootless Podman with quadlet/systemd. One service user per application. Every app is a pod.:::## Why Podman## Rootless by default## One user per service## Quadlet and systemd## The pod model## What goes in a pod## Health checks## Auto-update with `:latest`