diff --git a/.taskfiles/install.yaml b/.taskfiles/install.yaml
index e790cc6..0e16220 100644
--- a/.taskfiles/install.yaml
+++ b/.taskfiles/install.yaml
@@ -51,8 +51,9 @@ tasks:
       - yay -Syu --needed --noconfirm
         azure-cli
         github-cli
-        docker
-        docker-buildx
+        podman
+        podman-compose
+        podman-docker
         google-cloud-cli
         google-cloud-cli-gke-gcloud-auth-plugin
         nix
diff --git a/.taskfiles/symlinks.yaml b/.taskfiles/symlinks.yaml
index 2e77e9f..207c83e 100644
--- a/.taskfiles/symlinks.yaml
+++ b/.taskfiles/symlinks.yaml
@@ -29,6 +29,7 @@ tasks:
       - test -x "$(which nix 2>/dev/null)" && ln -rsf nix ~/.config/
       - test -x "$(which nvim 2>/dev/null)" && mkdir -p ~/.config/nvim && ln -rsf nvim/init.vim ~/.config/nvim && ln -rsf nvim/init.vim ~/.vimrc
       - test -x "$(which pacman 2>/dev/null)" && mkdir -p ~/.config/pacman && ln -rsf makepkg.conf ~/.config/pacman/makepkg.conf
+      - test -x "$(which podman 2>/dev/null)" && ln -rsf containers ~/.config/
       - test -x "$(which pulseaudio 2>/dev/null)" && mkdir -p ~/.config/pulse && ln -rsf pulse/default.pa ~/.config/pulse/default.pa
       - test -x "$(which ranger 2>/dev/null)" && ln -rsf ranger/commands.py ~/.config/ranger/commands.py && ln -rsf ranger/rc.conf ~/.config/ranger/rc.conf && ln -rsf ranger/scope.sh ~/.config/ranger/scope.sh
       - test -x "$(which rofi 2>/dev/null)" && ln -rsf rofi ~/.config/
diff --git a/containers/containers.conf b/containers/containers.conf
new file mode 100644
index 0000000..72b157b
--- /dev/null
+++ b/containers/containers.conf
@@ -0,0 +1,6 @@
+# For more information on this configuration file, see containers.conf(5).
+
+[containers]
+privileged = false
+read_only = true
+userns = "auto"
diff --git a/containers/registries.conf b/containers/registries.conf
new file mode 100644
index 0000000..a85913c
--- /dev/null
+++ b/containers/registries.conf
@@ -0,0 +1,3 @@
+# For more information on this configuration file, see containers-registries.conf(5).
+
+unqualified-search-registries = ["docker.io"]