Podman rootless

applications/podman.sls

@@ -9,3 +9,40 @@ applications_podman_enable:
     - name: podman
     - require:
       - applications_podman_pkgs
+
+applications_podman_rootless_cgroups:
+  service.enabled:
+    - name: cgroups
+
+applications_podman_user:
+  user.present:
+    - name: puser
+    - uid: 2000
+    - gid: 2000
+    - shell: /bin/zsh
+    - home: /home/puser
+    - usergroup: True
+    - createhome: True
+    - require:
+      - applications_podman_pkgs
+
+applications_podman_rootless_modules:
+  file.append:
+    - name: /etc/modules
+    - text:
+      - tun
+      - fuse
+
+applications_podman_rootless_subgid:
+  file.append:
+    - name: /etc/subgid
+    - text: puser:200000:65536
+    - require:
+      - applications_podman_user
+
+applications_podman_rootless_subuid:
+  file.append:
+    - name: /etc/subuid
+    - text: puser:200000:65536
+    - require:
+      - applications_podman_user

system/base.sls

@@ -8,6 +8,7 @@ system_base_pkgs:
       - vim
       - git
       - findmnt
+      - util-linux
 
 system_base_bin_dir:
   file.directory: