Merged
Conversation
Covers prerequisites, supplementary GID mapping, NFS limitations, multicast restrictions, D-Bus troubleshooting, Apptainer fakeroot interaction, and custom wrapper script patterns for Rocky Linux. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Howard Van Der Wal <hvanderwal@ciq.com>
Assisted-by: Claude claude-sonnet-4-6
Add Rocky 8 cgroups v2 enablement instructions, update tested with field to cover all three major versions, and clarify version-specific Podman and networking differences. Assisted-by: Claude claude-sonnet-4-6
Assisted-by: Claude claude-sonnet-4-6
Assisted-by: Claude claude-sonnet-4-6
The cat /proc/self/uid_map check showed expected output of "0 1000 1" for non-root users, but actual testing on Rocky 9.7 confirmed all users see "0 0 4294967295" on the host — the 1:1 identity mapping of the initial namespace. The output "0 1000 1" only appears inside a user namespace, not in a regular shell. The sysctl check already verifies user namespace support. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Testing confirmed Apptainer fakeroot only maps the main subordinate range from /etc/subgid, not individual GID entries. Supplementary groups show as nobody(65534) in Apptainer regardless of subgid configuration. Updated guide to clarify this limitation. Also removed backticks from section heading and added full stops. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Testing on Rocky 9.7 with Podman 5.6.0 revealed that: - Explicit --group-add <GID> works correctly without subgid entries - --group-add=keep-groups shows 65534(nobody) without subgid entries and 0(root),1(bin) with subgid entries — broken in both cases - Adding supplementary GIDs to /etc/subgid does not fix the issue Rewrote the supplementary group section to correctly identify --group-add=keep-groups as the problem and explicit --group-add as the solution. Removed incorrect subgid-based fix instructions. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Testing on Rocky 9.7 with pam_systemd.so disabled confirmed: - The actual Podman 5.6 error is "mkdir /run/user/1001: permission denied" not "dbus: couldn't determine address of session bus" - All verification and fix commands work as documented - Wrapper script examples work correctly for all three invocation patterns Updated conclusion to reference all tested Rocky Linux versions (8, 9, and 10) and added full stops to bullet points. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The dbus error appears on Rocky Linux 8 with Podman 4.9. The permission denied error appears on Rocky Linux 9 and 10 with Podman 5.6. Both share the same root cause and fix. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Shortened the title and added a paragraph in the introduction directing users to the existing Podman guide for basic usage. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Added ^N^ superscript citations in the body text linking to the numbered references section, following the Rocky Linux documentation formatting guidelines used in the Slurm guide. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Removed unused Podman documentation reference and renumbered remaining citations. Updated PAM -session note to include Rocky Linux 10, confirmed by testing on Rocky 10.1. Assisted-by: Claude claude-sonnet-4-6 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Added AI usage section with contribution policy link.
sspencerwire
approved these changes
Mar 4, 2026
Test results for 99174b2:
|
Contributor
Author
|
Excellent, thank you for the merge here Steven. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
From my work helping to solve issues with rootless podman and I believe this will be beneficial to others in the community. Rootless podman can be challenging to set up. All commands and solutions listed in this ticket have been tested on Rocky Linux 8, 9, and 10.
Author checklist (Completed by original Author)
Rocky Documentation checklist (Completed by Rocky team)