podman container not reachable if start with root
reddit / selfhosted

----------------------------------------------------------------------
ag959 · 2023-10-23 15:42

Can someone explain to me what i might miss?
When i start this container as non root i can reach it (the website)
from my network.
When i start the container as root i cannot reach the website. The
logs of the container show no error so i think i miss something else.


    podman run -d \
    --name jellyfin \
    --label "io.containers.autoupdate=image" \
    -p 8096:8096/tcp \
    --rm \
    --user $(id -u):$(id -g) \
    --userns keep-id \ #not used as root user
    -v jellyfin-cache:/cache:Z \
    -v jellyfin-config:/config:Z \
    --mount type=bind,source=/home/user/media,destination=/media,ro=tr
ue,relabel=private \
    docker.io/jellyfin/jellyfin:latest

​

----------------------------------------------------------------------
ElevenNotes · 2023-10-23 16:03

OS? SElinux active? Check your logs on the host. You probably forgot
to allow 8096 for root in podman.

PS: Runing podman as root defeats the purpose of podman.

----------------------------------------------------------------------
ag959 · 2023-10-23 18:41

ty for your reply. i just wanted to check the logs and suddenly it's
working after recreating the container and deleting all previos
containers.


Yes i know, i run all container with a normal user but some containers
need to communicate to a VPN container which needs root privileges to
work with the kernel.
Therfor i have to start those containers as root.