[pkg-go] Bug#1024809: podman systemd service running as user deletes socket file on termination

[Antoine Musso]

Package: podman
Version: 3.0.1+dfsg1-3+deb11u1
Severity: normal

Dear Maintainer,

I went to try running podman as a normal user using the systemd service
and socket defined by the Debian package. Namely:

  $ systemctl --user start podman.service

The service requires podman.socket which creates:

  /run/user/1000/podman/podman.sock

podman-system-service(1) mentions the API listening services expires
after 5 seconds and thus the service self terminate. Which is fine since
a request made to the podman.sock would bring up the service again.

However the service deletes the socket file upon completion and it is
not recreated by podman.socket and the setup is broken.

My workaround has been to make a copy of the service:

 cp /lib/systemd/system/podman.service \
	 ~/.config/systemd/user/mypodman.service

Amend it to no more relies on the podman.socket and instruct the service
to stay up indefinitely by passing it --time 0:

 ExecStart=/usr/bin/podman $LOGGING system service --time 0


-- System Information:
Debian Release: 11.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.19.0-0.deb11.2-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages podman depends on:
ii  conmon                           2.0.25+ds1-1.1
ii  containerd.io [runc]             1.6.10-1
ii  containernetworking-plugins      0.9.0-1+b6
ii  crun                             0.17+dfsg-1
ii  golang-github-containers-common  0.33.4+ds1-1+deb11u1
ii  init-system-helpers              1.60
ii  iptables                         1.8.7-1
ii  libc6                            2.31-13+deb11u5
ii  libdevmapper1.02.1               2:1.02.175-2.1
ii  libgpgme11                       1.14.0-1+b2
ii  libseccomp2                      2.5.1-1+deb11u1

Versions of packages podman recommends:
ii  buildah                                           1.19.6+dfsg1-1+b6
ii  catatonit                                         0.1.5-2
ii  fuse-overlayfs                                    1.4.0-1
ii  golang-github-containernetworking-plugin-dnsname  1.1.1+ds1-4+b7
ii  slirp4netns                                       1.0.1-2
ii  uidmap                                            1:4.8.1-1

Versions of packages podman suggests:
pn  containers-storage  <none>
ii  docker-compose      1.27.4-3~bpo11+1

-- no debconf information