How to run buildah in (rootless) podman?

[abitrolly]

Running official buildah container:

podman run -it --rm --security-opt label=disable -v "$PWD:/workdir" -w "/workdir" buildah

Trying to build this file:

FROM fedora:latest
LABEL authors.maintainer "GDK contributors: https://gitlab.com/gitlab-org/gitlab-development-kit/-/graphs/main"

# add `fedora` user to admin group and disable `sudo` password for it
RUN adduser fedora -G wheel \
  && echo "fedora       ALL=(ALL)       NOPASSWD: ALL" > /etc/sudoers.d/fedora

USER fedora

I get this error:

# buildah build -f Dockerfile.fedora
STEP 1/4: FROM fedora:latest
Resolved "fedora" as an alias (/etc/containers/registries.conf.d/000-shortnames.conf)
Trying to pull registry.fedoraproject.org/fedora:latest...
Getting image source signatures
Copying blob a52c777f25d4 done   |
Copying config a432b057a5 done   |
Writing manifest to image destination
Error: mounting new container: mounting build container "de75254507a9a9529b60700066e987348a85f6e4819f7ff5a678ac1b5da39551": creating overlay mount to /var/lib/containers/storage/overlay/0aa107bfb6cf63ed281243755219e9781a713e695c38b2615fb4d64e4c6d1ad9/merged, mount_data="lowerdir=/var/lib/containers/storage/overlay/l/6MCXZCCRT6546WFG3PY2DXAL2Q,upperdir=/var/lib/containers/storage/overlay/0aa107bfb6cf63ed281243755219e9781a713e695c38b2615fb4d64e4c6d1ad9/diff,workdir=/var/lib/containers/storage/overlay/0aa107bfb6cf63ed281243755219e9781a713e695c38b2615fb4d64e4c6d1ad9/work,nodev,fsync=0,volatile": using mount program /usr/bin/fuse-overlayfs: unknown argument ignored: lazytime
fuse: device not found, try 'modprobe fuse' first
fuse-overlayfs: cannot mount: No such file or directory
: exit status 1

Is it possible to provide the buildah image that will work flawlessly for this case without any additional know-how?

[nalind]

That particular message indicates a need for a --device /dev/fuse when invoking podman run. Alternately, we could change the image to not default to using fuse-overlayfs when it's built in https://github.com/containers/image_build.

[abitrolly]

Thanks for the clarification. I don't know what are the reasons to use that fuse-overlayfs in container, but if buildah can work without failing on it, that would solve the problem.