Rootless port/uid mapping debug

Inspect the user-namespace uid range backing rootless containers; fix perms via chown inside unshare

podman unshare cat /proc/self/uid_map; cat /etc/subuid
tool
podman16 commands
tags
podmansecurityrootlesstroubleshooting

More podman commands

  • Auto-update from registry
    podman auto-update --dry-run && systemctl --user start podman-auto-update

    Pull newer images and restart labeled containers; needs io.containers.autoupdate=registry label

  • Migrate storage after upgrade
    podman system migrate

    Refresh OCI runtime and user-namespace config after a podman/kernel upgrade; fixes stale containers

  • Run container rootless
    podman run -d --name web -p 8080:80 nginx:alpine

    Start a detached nginx container without root privileges

  • Build image
    podman build -t myapp:latest -f Containerfile .

    Build from a Containerfile (Dockerfile-compatible)

  • Generate systemd unit
    podman generate systemd --new --name web > ~/.config/systemd/user/web.service

    Create a systemd unit to manage the container lifecycle

all 16 podman commands