Working with RHEL UBI-micro in podman machine on macOS?

[rhwood]

Is there a way to work with the RHEL buildah container to build containers based on the RHEL ubi-micro images in a podman machine on macOS?

I am using podman 4.1.0 and would prefer to use buildah within a container itself as I don't want to install commands directly into the machine using rpm-ostree (which works, but essentially required a non-stock podman machine).

I can't figure out how to use buildah within a container (and don't know if I should be able to use it either).

This is the closest I have gotten to allowing buildah to work in a container (podman run command reformatted for readability):

rhwood@Calculus ~ % podman machine init --volume /Users:/mnt/Users          
Extracting compressed file
Image resized.
Machine init complete
To start your machine run:

	podman machine start

rhwood@Calculus ~ % podman machine start 
Starting machine "podman-machine-default"
Waiting for VM ...
Mounting volume... /Users:/mnt/Users

This machine is currently configured in rootless mode. If your containers
require root permissions (e.g. ports < 1024), or if you run into compatibility
issues with non-podman clients, you can switch using the following command: 

	podman machine set --rootful

API forwarding listening on: /Users/rhwood/.local/share/containers/podman/machine/podman-machine-default/podman.sock

The system helper service is not installed; the default Docker API socket
address can't be used by podman. If you would like to install it run the
following commands:

	sudo /usr/local/Cellar/podman/4.1.0/bin/podman-mac-helper install
	podman machine stop; podman machine start

You can still connect Docker API clients by setting DOCKER_HOST using the
following command in your terminal session:

	export DOCKER_HOST='unix:///Users/rhwood/.local/share/containers/podman/machine/podman-machine-default/podman.sock'

Machine "podman-machine-default" started successfully
rhwood@Calculus ~ % podman run \
    --security-opt label=disable \
    --security-opt seccomp=unconfined \
    --device /dev/fuse:rw \
    --volume /var/lib/containers:/var/lib/containers:rw \
    registry.redhat.io/ubi9/buildah \
    buildah unshare buildah from registry.access.redhat.com/ubi9/ubi-micro
Trying to pull registry.redhat.io/ubi9/buildah:latest...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:d22b4eae00908dda8a22f24404f5cb5dbb3871303aa302e1e728f7485770e180
Copying blob sha256:2c9b1d3d1a0af969583918cf19368bb46fe5d6c168c1af32e3b8be2ab2d57a88
Copying blob sha256:f95ee31bf3b71858108a30a93d9ffae722557f909d4b18e22f3157f96ca30dba
Copying blob sha256:d22b4eae00908dda8a22f24404f5cb5dbb3871303aa302e1e728f7485770e180
Copying blob sha256:2c9b1d3d1a0af969583918cf19368bb46fe5d6c168c1af32e3b8be2ab2d57a88
Copying blob sha256:f95ee31bf3b71858108a30a93d9ffae722557f909d4b18e22f3157f96ca30dba
Copying config sha256:64a6525461a306de198bd5f2372cff4fddf3057c6974efa28d10b2b5593b6709
Writing manifest to image destination
Storing signatures
mkdir /var/lib/containers/storage/mounts: permission denied
time="2022-05-28T18:31:48Z" level=warning msg="failed to shutdown storage: \"mkdir /var/lib/containers/storage/mounts: permission denied\""
time="2022-05-28T18:31:48Z" level=error msg="exit status 125"
time="2022-05-28T18:31:48Z" level=error msg="exit status 125"
rhwood@Calculus ~ %