I am moving from Docker to rootless podman and one thing that's surprising to me is that podman can create files that my user is, seemingly, not allowed to even read, so I need root to backup them.

For example, this one created by the postgres service of immich:

-rw-------. 1 525286 525286 1.6K Oct 2 20:16 /var/home/railcar/immich/postgres/pg_stat_tmp/global.stat

Is this expected in general (not for immich in particular)? Is there a single solution to solve this of does it have to be built in the images? It really feels wrong that I can start a container that will create files I am not allowed to even read.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 year ago (2 children)

As your user account, just run something like:

podman volume export VOLUME >backup.tar

Or from another machine, say you want to do a remote backup from your server:

ssh user@host podman volume export VOLUME | zstd -o backup.tar.zstd

  • source
  • hideshow 2 child comments