Running Ansible Navigator in a Podman Container

[symplrdudley]

Hello!
I wanted to run Ansible Navigator in a Container using Podman. So I built myself a Container using the following Containerfile:

ARG FEDORA_VERSOIN=latest

# FROM docker.io/library/fedora:${FEDORA_VERSOIN}
FROM quay.io/podman/stable:latest

RUN dnf update --assumeyes && \
    dnf install --assumeyes python3 python3-devel python-is-python3 \
      python3-pip krb5-workstation krb5-libs krb5-devel \
      gcc git

RUN groupadd ansibleuser && useradd -g ansibleuser ansibleuser

USER ansibleuser

WORKDIR /home/ansibleuser

ENV PATH="${PATH}:/home/ansibleuser/.local/bin"

RUN python -m pip install --upgrade pip && \
    python -m pip install ansible pywinrm pykerberos ansible-navigator && \
    python -m pip install azure-cli azure-devops && \
    python -m pip install git+https://github.com/aws/aws-cli.git@v2

RUN az extension add --name azure-devops

ENTRYPOINT ["/home/ansibleuser/.local/bin/ansible"]

CMD ["--help"]

I used the following command to build the container:

podman build \
  --file containers/Containerfile \
  --tag localhost/ansibletlbx:latest \
  .

To which I can then run it using the following command:

podman run --rm -it --entrypoint=/bin/bash localhost/ansibletlbx:latest

However, I run into the following error when trying to create an Execution Environment in the Container.

[ansibleuser@4d0c68bd4720 ~]$ cat ansible-navigator.log
2023-08-01T14:49:39.234623+00:00 WARNING 'ansible_navigator.image_manager.puller._log_message' Image inspection failed, image assumed to be corrupted or missing
2023-08-01T14:49:39.234813+00:00 WARNING 'ansible_navigator.image_manager.puller._log_message' stdout:
2023-08-01T14:49:39.234842+00:00 WARNING 'ansible_navigator.image_manager.puller._log_message' stderr: time="2023-08-01T14:49:39Z" level=error msg="running `/usr/bin/newuidmap 28 0 1001 1 1 524288 65536`: newuidmap: write to uid_map failed: Operation not permitted\n"
Error: cannot set up namespace using "/usr/bin/newuidmap": exit status 1

2023-08-01T14:49:39.256828+00:00 ERROR 'ansible_navigator.image_manager.puller._log_message' Execution environment pull failed
2023-08-01T14:55:26.651551+00:00 ERROR 'ansible_navigator.actions.collections._run_runner' ERRO[0000] running `/usr/bin/newuidmap 54 0 1001 1 1 524288 65536`: newuidmap: write to uid_map failed: Operation not permitted
Error: cannot set up namespace using "/usr/bin/newuidmap": exit status 1

2023-08-01T14:55:32.799580+00:00 ERROR 'ansible_navigator.actions.collections._parse' Unable to extract collection json from stdout

I'm sure there are more options I need to pass to Podman, but I do not know what those are. Does anyone have any ideas or thoughts on this?