Authentik in rootless Podman?

[Pshemas]

Has anyone here got Authentik working with Podman (podman compose)?

I've been looking at compose.yaml and this caught my eye:

    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

As I don't have docker installed I don't have docker.socket. I could map /var/run/podman/podman.socket... but I guess that won't work in rootless mode as this file belongs to root/root.

Any suggestions?

[gwelch-contegix]

You don't need the socket, it's for automatically creating containers. you instead create all the containers manually. You should also be able to start the user service https://github.com/containers/podman/blob/main/docs/tutorials/socket_activation.md and it might be compatible, I know it's compatible with the docker-compose command.

[rtk0c]

Late addition: in addition to the rootful /run/podman/podman.sock activated with systemctl enable --now podman.sock (as you seem to already know) a there is also a per-user sock, at /run/user/$UID/podman/podman.sock activated with systemctl --user enable --now podman.sock. You should be able to bind mount that sock to /var/run/docker.sock as Authentik expects, though I haven't tested if what's spoken across the socket is compatible.

Hope this is helpful.