

OciContainers just added rootless mode for podman. I was planning on playing a bit more with it but I’m quite busy and haven’t fount the time recently. For the time being I run everything as rootfull since I don’t expose stuff directly through the internet.
I might repond here if I don’t forget once I’ve experimented a bit more.
xpinstall.signature.required was set back to true, seems like complaining works well