Podman finds old volume from other service

[Damncold]

Hi,

my original problem was, that i could not get crowdsec running in rootless podman, after upgrading my debian from kernel 6.1 to 6.12
I got:

ln: /var/lib/crowdsec/data/GeoLite2-ASN.mmdb: Permission denied

I tried several things, also using volume instead of bind mount.
But nothing helped.
I now was trying pangolin and installing another crowdsec-service for this and got the same error like above.

this is my current quadlet:

[Unit]
Description=crowdsec
After=gerbil.service

[Container]
ContainerName=crowdsec-pangolin
Image=docker.io/crowdsecurity/crowdsec:latest

Environment=TZ=Europe/Berlin
Environment=COLLECTIONS="crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"
Environment=ACQUIRE_FILES="/var/log/traefik/*.log"
Environment=ENROLL_INSTANCE_NAME="crowdsec-pangolin"
Environment=ENROLL_TAGS=podman
Environment=GID=1000
Environment=PARSERS="crowdsecurity/whitelists"

User=1000:1000

Volume=%h/docker/appdata/pangolin/crowdsec:/etc/crowdsec
Volume=%h/docker/appdata/pangolin/crowdsec/data:/var/lib/crowdsec/data
Volume=%h/docker/appdata/pangolin/traefik/logs:/var/log/traefik:ro
Volume=%h/docker/appdata/pangolin/traefik/captcha.html:/etc/traefik/conf/captcha.html

[Service]
Restart=unless-stopped

After removing "User=1000:1000" from the quadlet. i get

Mär 14 09:28:44 DMZ crowdsec-pangolin[340627]: /var/lib/crowdsec/data was found in a volume

i now removed all volumes via podman volume rm,
but still get this error

marco@DMZ:~/.local/share/containers/storage/volumes$ l
insgesamt 8,0K
drwx------  2 marco marco 4,0K 14. Mär 09:23 ./
drwx------ 10 marco marco 4,0K 26. Jan 2024  ../
marco@DMZ:~/.local/share/containers/storage/volumes$
marco@DMZ:~/.local/share/containers/storage/volumes$  podman volume ls
marco@DMZ:~/.local/share/containers/storage/volumes$

I dont know what i can do now ...

Any tips would be appreciated

[Damncold]

Am i realy the only one with this problem? oO

[remingtonc]

Is that log line an error or informational? It sounds like this container requires exactly that, the path being found in a volume. https://hub.docker.com/r/crowdsecurity/crowdsec#volumes

Is there something else erroring? Does your user own those source volume directories?

[Damncold]

Hi,

it realy was only informational.
seems that i still dont understand podman and the namespace /user permission things …
i removed "User=1000:1000" from the quadlet and switched to named volumes

now its working …