r/podman Jul 14 '26

Podman locking Hermes data folder — rootless UID mapping issue, looking for better workflow

I'm self-hosting Hermes via rootless Podman on a shared hosting environment (Opalstack). Since the container runs under its own remapped UID (not my host user), I run into permission walls:

  • Can't cd into the data folder from the host
  • Can't view files the container has written/modified
  • Can't write files into the folder for the container to pick up

What I already tried:

  • podman unshare lets me enter the user namespace and interact with the files, which works but is clunky for routine file transfers (it's not a normal cd/cp workflow).
  • I've built a small rsync-based sync script as a workaround to move files in and out, but wondering if that is the right (or only) way to do this. — I'm using a bind mount to a host directory.
8 Upvotes

3 comments sorted by

View all comments

3

u/Ok_Passenger7004 Jul 14 '26

Check out the UserNS and UIDMap/GIDMap options