Can't start crowdsec in rootless podman

Hi,

im trying to get crowdsec running in rootless podman.

But i get the following error:

crowdsec-pangolin[243452]: ln: /var/lib/crowdsec/data/GeoLite2-ASN.mmdb: Permission denied

I think the permissions are correct:

marco@DMZ:~/docker/appdata/pangolin/crowdsec/data$ l
insgesamt 9,2M
drwxrwxr-x 2 marco marco 4,0K 13. Mär 23:24 ./
drwxrwx--- 7 marco marco 4,0K 13. Mär 23:04 ../
-rw-r--r-- 1 marco marco 9,2M  4. Mär 23:24 GeoLite2-Country.mmdb

marco@DMZ:~/docker/appdata/pangolin/crowdsec/data$ id
uid=1000(marco) gid=1000(marco) Gruppen=1000(marco),24(cdrom),25(floppy),27(sudo),29(audio),30(dip),44(video),46(plugdev),100(users),106(netdev)

This is my quadlet file:

[Unit]
Description=crowdsec
After=gerbil.service

[Container]
ContainerName=crowdsec-pangolin
Image=docker.io/crowdsecurity/crowdsec:latest

Environment=TZ=Europe/Berlin
Environment=COLLECTIONS="crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"
Environment=ACQUIRE_FILES="/var/log/traefik/*.log"
Environment=ENROLL_INSTANCE_NAME="crowdsec-pangolin"
Environment=ENROLL_TAGS=podman
Environment=GID=1000
Environment=PARSERS=crowdsecurity/whitelists"

User=1000:1000

Volume=%h/docker/appdata/pangolin/crowdsec:/etc/crowdsec
Volume=%h/docker/appdata/pangolin/crowdsec/data:/var/lib/crowdsec/data
Volume=%h/docker/appdata/pangolin/traefik/logs:/var/log/traefik:ro
Volume=%h/docker/appdata/pangolin/traefik/captcha.html:/etc/traefik/conf/captcha.html

[Service]
Restart=unless-stopped

Couldn’t find anything related to this, beside:

But can’t see the solution there.

Can anyone help me with this?

After removing:

User=1000:1000

from my quadlet.

I get now the following error:

Mär 14 09:28:44 DMZ crowdsec-pangolin[340627]: /var/lib/crowdsec/data was found in a volume

This is a volume i used in an old crowdsec container.

But this is disabled and i also removed all volumes via podman volume rm …

I’m still stuck here