dont

@dont@lemmy.world

This is a remote user, information on this page may be incomplete. View original ↗

⁨Comment⁩ on ⁨Managing podman quadlets, users subids and such⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
Are you using one (system) user per quadlet? (Why?) Each of my quadlets is owned by the same (non-root) user and the containers are rootless. In that case, podman deals with (sub)id-allocation. selinux-labels take care of volume scopes and podman networks are as isolated as possible. Seems enough for me; never even considered using different users in that case.