docker.io/library/maptool:latest and maptool:latest resolve to the same local image (verified on cube.local) - the docker.io/library prefix is just podman's normalization of the unqualified name, not an actual registry reference. Short form matches what docker-compose.yaml itself uses and avoids implying a Docker Hub push/pull that never happens.