2026-04-12 21:12 UTC
@niclas@infosec.exchange how did you manage to run each container as a separate user? I have a few containers in my stack that have to run as uid 1000 (like homepage for example), what do you do in this situation?
Replies (1)
-
@niclas@infosec.exchange 2026-04-12 21:21
@hotsause@mastodon.social If I take Grafana as an example: 1. Create service account user "grafana" 2. su grafana 3. Copy the podman quadlet file to the folder"~/.config/containers/systemd" so the podman quadlet runs rootless as the user "grafana" 4. systemctl --user daemon-reload 5. systemctl --user start grafana One disadvantage is that "podman ps" no longer shows the status of all running containers of this host, since the containers are no longer running under the same user. Edit: Also enable linger for the user, otherwise you get warnings and the user is not able to autostart the containers on boot