Device permissions are changed when using a userns (rootful container) about crun

[rhatdan]

This is a fairly serious bug and should be fixed before we ship 5.0.

[mheon]

Can you try with the runc OCI runtime? I feel like this is more likely crun than it is Podman.

[jorti]

Can you try with the runc OCI runtime? I feel like this is more likely crun than it is Podman.

You are right, I get the correct permissions when using runc. It even preserves the ACL in the /dev/dri/card1 device too:

$ sudo podman run -ti --rm  --device /dev/dri --runtime /usr/bin/runc --userns=auto fedora ls -l /dev/dri
total 0
crw-rw----+ 1 nobody nobody 226,   1 Jan 17 19:31 card1
crw-rw-rw-. 1 nobody nobody 226, 128 Jan 17 06:26 renderD128

[giuseppe]

opened a PR: #1390