Rootfull podman, permission denied [Rocky Linux, SELinux]

[Extarys]

I tried running the simple command writtin on the website for portainer but I get an error every time I click somewhere:

 Internal Server Error: Error while fetching server API version: ('Connection aborted.', PermissionError(13, 'Permission denied')) 

And the command:

sudo podman run -v /var/run/podman/podman.sock:/var/run/docker.sock -v yacht:/config -p 8006:8000 --name yacht -d ghcr.io/selfhostedpro/yacht:latest

I tried adding a :z for the volume part as I'm using Rocky Linux.

Here is the inspect:

$ sudo podman inspect yacht
[
     {
          "Id": "e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9",
          "Created": "2022-09-08T20:07:09.366750267-04:00",
          "Path": "/init",
          "Args": [
               "/init"
          ],
          "State": {
               "OciVersion": "1.0.2-dev",
               "Status": "running",
               "Running": true,
               "Paused": false,
               "Restarting": false,
               "OOMKilled": false,
               "Dead": false,
               "Pid": 348576,
               "ConmonPid": 348563,
               "ExitCode": 0,
               "Error": "",
               "StartedAt": "2022-09-08T20:07:09.755346816-04:00",
               "FinishedAt": "0001-01-01T00:00:00Z",
               "Health": {
                    "Status": "",
                    "FailingStreak": 0,
                    "Log": null
               },
               "CgroupPath": "/machine.slice/libpod-e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9.scope",
               "CheckpointedAt": "0001-01-01T00:00:00Z",
               "RestoredAt": "0001-01-01T00:00:00Z"
          },
          "Image": "27aae3676a3ab58bedb6c8a6678180c1edb7b91407f409ae5b55ba1a4172aea4",
          "ImageName": "ghcr.io/selfhostedpro/yacht:latest",
          "Rootfs": "",
          "Pod": "",
          "ResolvConfPath": "/run/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/resolv.conf",
          "HostnamePath": "/run/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/hostname",
          "HostsPath": "/run/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/hosts",
          "StaticDir": "/var/lib/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata",
          "OCIConfigPath": "/var/lib/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/config.json",
          "OCIRuntime": "runc",
          "ConmonPidFile": "/run/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/conmon.pid",
          "PidFile": "/run/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/pidfile",
          "Name": "yacht",
          "RestartCount": 0,
          "Driver": "overlay",
          "MountLabel": "system_u:object_r:container_file_t:s0:c139,c833",
          "ProcessLabel": "system_u:system_r:container_t:s0:c139,c833",
          "AppArmorProfile": "",
          "EffectiveCaps": [
               "CAP_CHOWN",
               "CAP_DAC_OVERRIDE",
               "CAP_FOWNER",
               "CAP_FSETID",
               "CAP_KILL",
               "CAP_NET_BIND_SERVICE",
               "CAP_NET_RAW",
               "CAP_SETFCAP",
               "CAP_SETGID",
               "CAP_SETPCAP",
               "CAP_SETUID",
               "CAP_SYS_CHROOT"
          ],
          "BoundingCaps": [
               "CAP_CHOWN",
               "CAP_DAC_OVERRIDE",
               "CAP_FOWNER",
               "CAP_FSETID",
               "CAP_KILL",
               "CAP_NET_BIND_SERVICE",
               "CAP_NET_RAW",
               "CAP_SETFCAP",
               "CAP_SETGID",
               "CAP_SETPCAP",
               "CAP_SETUID",
               "CAP_SYS_CHROOT"
          ],
          "ExecIDs": [],
          "GraphDriver": {
               "Name": "overlay",
               "Data": {
                    "LowerDir": "/var/lib/containers/storage/overlay/d7554fe5c92fcf2eb069d0b42d5b2d7f76c31af37d75b82f7534aa78d61f9382/diff:/var/lib/containers/storage/overlay/3aeaa57a6de7523e35f72b353a9c49c873c44f926878d8c5a578969688cf8874/diff:/var/lib/containers/storage/overlay/269bcdd2b4fb2aeea4a89a8f8ff2520334c7fcd6f0be4d2cb7483dcfa7fde86d/diff:/var/lib/containers/storage/overlay/b6e4ee930b010122e23dd807664e78f3c38bffd8df95081c992e27db26cabefe/diff:/var/lib/containers/storage/overlay/a8630af1ae3ba3cfafb48c57f84d790919b4a2a364885f6ea6d638a2a0c2d864/diff:/var/lib/containers/storage/overlay/7c3dbc22d94dc84fe913af143516712370e81a56c173dd0acfad738f404acf91/diff:/var/lib/containers/storage/overlay/8032e0b65c9e47cd7e8ecd8cdd7e4a85ebde0837bba1aeca9d0d749d559360c8/diff:/var/lib/containers/storage/overlay/c6815eb7f29a7fc868f70b6b91f5d30fcaaddb4b24533db789f69a6f715423b1/diff:/var/lib/containers/storage/overlay/f002ac0215755b77c78ccb54d918e50040a6ed9ea1e571ff6cf504f9d79859cb/diff:/var/lib/containers/storage/overlay/02853d8f7424a9f5a4ab4d574010d833a260c76d9e391c4591152ee74acedbc6/diff:/var/lib/containers/storage/overlay/cc19ec520dcb7cc992d9dea77f4b94fa0092e431ee929ba13543bab6100bdbfd/diff:/var/lib/containers/storage/overlay/106ec2a81e86d67d06770a157712998213defd2d265e5a026a93c5d80310fc2a/diff:/var/lib/containers/storage/overlay/600d0db034bb0e34ecd165408493d7cd62539e352f555efd64a1d80adafd7ed8/diff:/var/lib/containers/storage/overlay/e9ca0ddbfb9e48320ec15964dc1d6a6fd15cd3dd3a7e2cf0199a91e58d3521bd/diff",
                    "MergedDir": "/var/lib/containers/storage/overlay/9504e95cf611ac20c35f361e0757beb11ab1c40e56d5d76fbc8ffd153774b361/merged",
                    "UpperDir": "/var/lib/containers/storage/overlay/9504e95cf611ac20c35f361e0757beb11ab1c40e56d5d76fbc8ffd153774b361/diff",
                    "WorkDir": "/var/lib/containers/storage/overlay/9504e95cf611ac20c35f361e0757beb11ab1c40e56d5d76fbc8ffd153774b361/work"
               }
          },
          "Mounts": [
               {
                    "Type": "volume",
                    "Name": "yacht",
                    "Source": "/var/lib/containers/storage/volumes/yacht/_data",
                    "Destination": "/config",
                    "Driver": "local",
                    "Mode": "",
                    "Options": [
                         "nosuid",
                         "nodev",
                         "rbind"
                    ],
                    "RW": true,
                    "Propagation": "rprivate"
               },
               {
                    "Type": "bind",
                    "Source": "/var/run/podman/podman.sock",
                    "Destination": "/var/run/docker.sock",
                    "Driver": "",
                    "Mode": "",
                    "Options": [
                         "nosuid",
                         "nodev",
                         "rbind"
                    ],
                    "RW": true,
                    "Propagation": "rprivate"
               }
          ],
          "Dependencies": [],
          "NetworkSettings": {
               "EndpointID": "",
               "Gateway": "10.88.0.1",
               "IPAddress": "10.88.0.10",
               "IPPrefixLen": 16,
               "IPv6Gateway": "",
               "GlobalIPv6Address": "",
               "GlobalIPv6PrefixLen": 0,
               "MacAddress": "d2:81:c3:fe:a5:a9",
               "Bridge": "",
               "SandboxID": "",
               "HairpinMode": false,
               "LinkLocalIPv6Address": "",
               "LinkLocalIPv6PrefixLen": 0,
               "Ports": {
                    "8000/tcp": [
                         {
                              "HostIp": "",
                              "HostPort": "8006"
                         }
                    ]
               },
               "SandboxKey": "/run/netns/netns-9cf29a1f-e7a3-04e7-0d5b-38a3a504f4db",
               "Networks": {
                    "podman": {
                         "EndpointID": "",
                         "Gateway": "10.88.0.1",
                         "IPAddress": "10.88.0.10",
                         "IPPrefixLen": 16,
                         "IPv6Gateway": "",
                         "GlobalIPv6Address": "",
                         "GlobalIPv6PrefixLen": 0,
                         "MacAddress": "d2:81:c3:fe:a5:a9",
                         "NetworkID": "podman",
                         "DriverOpts": null,
                         "IPAMConfig": null,
                         "Links": null,
                         "Aliases": [
                              "e7d0d23fb15e"
                         ]
                    }
               }
          },
          "Namespace": "",
          "IsInfra": false,
          "Config": {
               "Hostname": "e7d0d23fb15e",
               "Domainname": "",
               "User": "",
               "AttachStdin": false,
               "AttachStdout": false,
               "AttachStderr": false,
               "Tty": false,
               "OpenStdin": false,
               "StdinOnce": false,
               "Env": [
                    "PYTHONIOENCODING=UTF-8",
                    "THEME=Default",
                    "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                    "TERM=xterm",
                    "container=podman",
                    "PS1=$(whoami)@$(hostname):$(pwd)\\$ ",
                    "HOME=/root",
                    "HOSTNAME=e7d0d23fb15e"
               ],
               "Cmd": null,
               "Image": "ghcr.io/selfhostedpro/yacht:latest",
               "Volumes": null,
               "WorkingDir": "/api",
               "Entrypoint": "/init",
               "OnBuild": null,
               "Labels": {
                    "build_version": "Linuxserver.io version:- a6be87cb-ls41 Build-date:- 2022-05-17T08:32:18+02:00",
                    "maintainer": "TheLamer",
                    "org.opencontainers.image.authors": "linuxserver.io",
                    "org.opencontainers.image.created": "2022-05-17T08:32:18+02:00",
                    "org.opencontainers.image.description": "baseimage-alpine image by linuxserver.io",
                    "org.opencontainers.image.documentation": "https://docs.linuxserver.io/images/docker-baseimage-alpine",
                    "org.opencontainers.image.licenses": "GPL-3.0-only",
                    "org.opencontainers.image.ref.name": "dd18d8e18f0d22051a950f31d668ba9622487db5",
                    "org.opencontainers.image.revision": "dd18d8e18f0d22051a950f31d668ba9622487db5",
                    "org.opencontainers.image.source": "https://github.com/linuxserver/docker-baseimage-alpine",
                    "org.opencontainers.image.title": "Baseimage-alpine",
                    "org.opencontainers.image.url": "https://github.com/linuxserver/docker-baseimage-alpine/packages",
                    "org.opencontainers.image.vendor": "linuxserver.io",
                    "org.opencontainers.image.version": "a6be87cb-ls41"
               },
               "Annotations": {
                    "io.container.manager": "libpod",
                    "io.kubernetes.cri-o.Created": "2022-09-08T20:07:09.366750267-04:00",
                    "io.kubernetes.cri-o.TTY": "false",
                    "io.podman.annotations.autoremove": "FALSE",
                    "io.podman.annotations.init": "FALSE",
                    "io.podman.annotations.privileged": "FALSE",
                    "io.podman.annotations.publish-all": "FALSE",
                    "org.opencontainers.image.stopSignal": "15"
               },
               "StopSignal": 15,
               "CreateCommand": [
                    "podman",
                    "run",
                    "-v",
                    "/var/run/podman/podman.sock:/var/run/docker.sock:z",
                    "-v",
                    "yacht:/config",
                    "-p",
                    "8006:8000",
                    "--name",
                    "yacht",
                    "-d",
                    "ghcr.io/selfhostedpro/yacht:latest"
               ],
               "Umask": "0022",
               "Timeout": 0,
               "StopTimeout": 10,
               "Passwd": true
          },
          "HostConfig": {
               "Binds": [
                    "yacht:/config:rw,rprivate,nosuid,nodev,rbind",
                    "/var/run/podman/podman.sock:/var/run/docker.sock:rw,rprivate,nosuid,nodev,rbind"
               ],
               "CgroupManager": "systemd",
               "CgroupMode": "host",
               "ContainerIDFile": "",
               "LogConfig": {
                    "Type": "k8s-file",
                    "Config": null,
                    "Path": "/var/lib/containers/storage/overlay-containers/e7d0d23fb15e45fd5c576902375a6920fa155d0f23686dd579136286e0d486e9/userdata/ctr.log",
                    "Tag": "",
                    "Size": "0B"
               },
               "NetworkMode": "bridge",
               "PortBindings": {
                    "8000/tcp": [
                         {
                              "HostIp": "",
                              "HostPort": "8006"
                         }
                    ]
               },
               "RestartPolicy": {
                    "Name": "",
                    "MaximumRetryCount": 0
               },
               "AutoRemove": false,
               "VolumeDriver": "",
               "VolumesFrom": null,
               "CapAdd": [],
               "CapDrop": [
                    "CAP_AUDIT_WRITE",
                    "CAP_MKNOD"
               ],
               "Dns": [],
               "DnsOptions": [],
               "DnsSearch": [],
               "ExtraHosts": [],
               "GroupAdd": [],
               "IpcMode": "shareable",
               "Cgroup": "",
               "Cgroups": "default",
               "Links": null,
               "OomScoreAdj": 0,
               "PidMode": "private",
               "Privileged": false,
               "PublishAllPorts": false,
               "ReadonlyRootfs": false,
               "SecurityOpt": [],
               "Tmpfs": {},
               "UTSMode": "private",
               "UsernsMode": "",
               "ShmSize": 65536000,
               "Runtime": "oci",
               "ConsoleSize": [
                    0,
                    0
               ],
               "Isolation": "",
               "CpuShares": 0,
               "Memory": 0,
               "NanoCpus": 0,
               "CgroupParent": "",
               "BlkioWeight": 0,
               "BlkioWeightDevice": null,
               "BlkioDeviceReadBps": null,
               "BlkioDeviceWriteBps": null,
               "BlkioDeviceReadIOps": null,
               "BlkioDeviceWriteIOps": null,
               "CpuPeriod": 0,
               "CpuQuota": 0,
               "CpuRealtimePeriod": 0,
               "CpuRealtimeRuntime": 0,
               "CpusetCpus": "",
               "CpusetMems": "",
               "Devices": [],
               "DiskQuota": 0,
               "KernelMemory": 0,
               "MemoryReservation": 0,
               "MemorySwap": 0,
               "MemorySwappiness": 0,
               "OomKillDisable": false,
               "PidsLimit": 2048,
               "Ulimits": [
                    {
                         "Name": "RLIMIT_NOFILE",
                         "Soft": 1048576,
                         "Hard": 1048576
                    },
                    {
                         "Name": "RLIMIT_NPROC",
                         "Soft": 4194304,
                         "Hard": 4194304
                    }
               ],
               "CpuCount": 0,
               "CpuPercent": 0,
               "IOMaximumIOps": 0,
               "IOMaximumBandwidth": 0,
               "CgroupConf": null
          }
     }
]

I'm sure it's a simple thing, but I cannot make this work at all and nobody else seems to have this issue. (Happening to me a lot lately)

Any ideas? :)

[jg3]

I saw the same thing installing on a fresh Docker running directly on Raspberry Pi Bullseye. There were several Stack Overflow articles saying to set the docker group and add your user, chmod the docker.sock, and the like ... but none seemed to apply here.