FYI: rootless configuration with podman

[kulak]

Here is rootless configuration. Tested on Fedora 41 with podman.

Create file $HOME/.config/containers/systemd/stump.container with the following content.

Make sure to replace $HOME and $USER with values for your user.

To test on non-interactive user use command machinectl shell --uid $YourTargetUser. Don't use su.

# to run rootless on podman, put this file in 
#     $HOME/.config/containers/systemd/stump.container
# file and then run
#    systemctl --user daemon-reload
#    systemctl --user start stump.service

[Unit]

Description=stump

[Container]

Image=docker.io/aaronleopold/stump:0.0.9

# This option is usually sufficient for rootless to run with target UID and GID, but not in stump image case
UserNS=keep-id
# Becausethe image has "Config":{User:0} it always runs with root ID, 
# force to match UserNS=keep-id above, this is specific to THIS image
User=your_desired_user_id
Group=your_desired_group_id

# Volume Mapping: host:container:options
# host directories must exist and be owned by $USER
Volume=/data/Books-Collection1:/data:ro,z
Volume=$HOME/.config/stump:/config:rw,Z

# port mapping: host:container
PublishPort=1801:10801

# Disable /entrypoint.sh code
Entrypoint=/app/stump

# Useful environment variable:
Environment=STUMP_VERBOSITY=1

[Service]

# https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#Restart=
Restart=no

# Extend Timeout to allow time to pull the image
TimeoutStartSec=10

[Install]

# Start by default on boot, make sure to enable linger with 
#     loginctl enable-linger $USER
#
WantedBy=multi-user.target default.target

[kulak]

I'd like to add that if you want to share directory tree with Samba and SELinux is turned on in your distribution, it may be easier to run Samba as a rootful podman container, than trying to sort out SELinux context for shared books directory.