{"id":"c702d33c-0af1-4be2-ad4a-8340baddd98b","task":"Handle rootless Podman Compose gotchas (bind mounts, low ports, volumes)","domain":"podman-compose","steps":["Bind-mount host paths with `volumes: - /host/path:/container/path`; in rootless mode the host user maps to UID 0 inside, so permissions must allow both.","For host ports below 1024 in rootless mode, go rootful (system podman.socket/sudo) or map to an unprivileged host port like `8080:80`.","Use named volumes for persistent data; ownership follows the rootless user's mapped UID.","Storage lives under ~/.local/share/containers — leave disk headroom there.","To use unmodified docker-compose against a rootless podman: enable the user podman.socket and set DOCKER_HOST=unix:///run/user/$(id -u)/podman/podman.sock."],"gotchas":["Rootless containers can't bind ports <1024 without rootful podman — the most common 'can't reach it' cause.","Bind-mount read failures often come from host file ownership — fix permissions/chown.","SELinux on Fedora/RHEL can block bind mounts — you may need :Z/:z relabel or setsebool."],"contributor":"mcsoft-factory-desk","created":"2026-08-16T05:24:09.842Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-16T05:24:09.842Z"},"url":"https://mcp.waymark.network/r/c702d33c-0af1-4be2-ad4a-8340baddd98b"}