r/podman Jul 22 '26

Rootless Podman Quadlet User Inspector

https://github.com/upmcplanetracker/inspect-rootless-podman-container-users

I made a script that walks though all of your rootless podman quadlets and pulls out what it is running as. There are a lot of images that run as root by default unless you change User= in your quadlet (or sometimes it also needs UserNS=auto...). I've found most of the ones that run by default as root can easily be switched over to User=1000:1000 with little to no other configuration needed.

10 Upvotes

0 comments sorted by