Podman in Podman based on Debian

[0xmeyer]

Hello,

has anyone already gotten a Podman image based on Debian to work?

My container image is based on the image from this repository with minor adjustments.

FROM debian:12

ARG DEBIAN_FRONTEND=noninteractive

RUN set -x \
    && apt update \
    && apt install -y strace uidmap fuse-overlayfs slirp4netns podman \
    && rm -rf /var/cache/apt/archives/*deb /var/cache/apt/*pkgcache.bin /var/lib/apt/lists/*

RUN useradd podman \
    && echo -e "podman:1:999\npodman:1001:64535" | tee /etc/subuid /etc/subgid

ARG _REPO_URL="https://raw.githubusercontent.com/containers/podman/main/contrib/podmanimage/stable"
ADD $_REPO_URL/containers.conf /etc/containers/containers.conf
ADD $_REPO_URL/podman-containers.conf /home/podman/.config/containers/containers.conf

RUN mkdir -p /home/podman/.local/share/containers && \
    chown podman:podman -R /home/podman && \
    chmod 644 /etc/containers/containers.conf

Running rootless Podman with the --privileged flag works without problems. Running rootless Podman without the --privileged flag doesn't ...

podman run -it --user podman --privileged debian-podman:latest podman info                                                                                                                      [95/4806]
host:                                                                                                                                                                                                                                                                
  arch: amd64                                                                                                                                                                                                                                                        
  buildahVersion: 1.28.2
...

podman run -it --security-opt label=disable --user podman --device /dev/fuse debian-podman:latest podman info
ERRO[0000] running `/usr/bin/newuidmap 16 0 1000 1 1 1001 64535`: newuidmap: write to uid_map failed: Operation not permitted 
Error: cannot set up namespace using "/usr/bin/newuidmap": exit status 1

podman run -it --security-opt label=disable --user podman --device /dev/fuse debian-podman:latest stat /usr/bin/newuidmap
  File: /usr/bin/newuidmap
  Size: 59336           Blocks: 120        IO Block: 4096   regular file
Device: 0,281   Inode: 44969107    Links: 1
Access: (4755/-rwsr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2023-03-23 12:40:50.000000000 +0000
Modify: 2023-03-23 12:40:50.000000000 +0000
Change: 2023-12-18 08:03:08.055593147 +0000
 Birth: 2023-12-18 08:03:08.055593147 +0000

I hope anyone already solved that puzzle :)

Many thanks in advance!

[flixman]

@0xmeyer I see you closed this question. Did you manage to solve this issue? I am also encountering it.

[0xmeyer]

This blog post helped me to run Podman in and Debian-based container in Kubernetes.