Is there a way to make Podman work within unprivliged containers?

I’m trying to use Podman within an Incus container and get this error:

[root@one-hagfish ~]# podman run hello-world
Error: crun: cannot open sd-bus: No such file or directory: OCI runtime attempted to invoke a command that was not found

I’ve tried both with and without security.nesting=true but I get the same result either way. If I make the Incus container privileged it works fine. I’ve tried with a combination of Debian and Fedora containers and hosts and none of the combos worked. Docker works correctly when nested, it’s just Podman that’s the problem. Is there any way to get Podman working without having to go privileged?

stgraber@dakara:~$ incus launch images:ubuntu/22.04 podman -c security.nesting=true
Creating podman
Starting podman
stgraber@dakara:~$ incus exec podman bash
root@podman:~# apt install podman
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  buildah catatonit conmon containernetworking-plugins crun dbus-user-session dconf-gsettings-backend dconf-service dirmngr dns-root-data dnsmasq-base
  fuse-overlayfs glib-networking glib-networking-common glib-networking-services gnupg gnupg-l10n gnupg-utils
  golang-github-containernetworking-plugin-dnsname golang-github-containers-common golang-github-containers-image gpg gpg-agent gpg-wks-client gpg-wks-server
  gpgconf gpgsm gsettings-desktop-schemas iptables libarchive13 libassuan0 libavahi-client3 libavahi-common-data libavahi-common3 libavahi-glib1 libbrotli1
  libdconf1 libgpgme11 libip6tc2 libksba8 libldap-2.5-0 libldap-common libnetfilter-conntrack3 libnfnetlink0 libnftnl11 libnpth0 libostree-1-1 libproxy1v5
  libpsl5 libsasl2-2 libsasl2-modules libsasl2-modules-db libslirp0 libsoup2.4-1 libsoup2.4-common libyajl2 pinentry-curses publicsuffix session-migration
  slirp4netns uidmap
Suggested packages:
  containers-storage pinentry-gnome3 tor parcimonie xloadimage scdaemon firewalld nftables lrzip libsasl2-modules-gssapi-mit
  | libsasl2-modules-gssapi-heimdal libsasl2-modules-ldap libsasl2-modules-otp libsasl2-modules-sql pinentry-doc docker-compose
The following NEW packages will be installed:
  buildah catatonit conmon containernetworking-plugins crun dbus-user-session dconf-gsettings-backend dconf-service dirmngr dns-root-data dnsmasq-base
  fuse-overlayfs glib-networking glib-networking-common glib-networking-services gnupg gnupg-l10n gnupg-utils
  golang-github-containernetworking-plugin-dnsname golang-github-containers-common golang-github-containers-image gpg gpg-agent gpg-wks-client gpg-wks-server
  gpgconf gpgsm gsettings-desktop-schemas iptables libarchive13 libassuan0 libavahi-client3 libavahi-common-data libavahi-common3 libavahi-glib1 libbrotli1
  libdconf1 libgpgme11 libip6tc2 libksba8 libldap-2.5-0 libldap-common libnetfilter-conntrack3 libnfnetlink0 libnftnl11 libnpth0 libostree-1-1 libproxy1v5
  libpsl5 libsasl2-2 libsasl2-modules libsasl2-modules-db libslirp0 libsoup2.4-1 libsoup2.4-common libyajl2 pinentry-curses podman publicsuffix
  session-migration slirp4netns uidmap
0 upgraded, 62 newly installed, 0 to remove and 0 not upgraded.
Need to get 30.7 MB of archives.
After this operation, 126 MB of additional disk space will be used.
Do you want to continue? [Y/n] 
Get:1 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libip6tc2 amd64 1.8.7-1ubuntu5.1 [20.2 kB]
Get:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 libnfnetlink0 amd64 1.0.1-3build3 [14.6 kB]
Get:3 http://archive.ubuntu.com/ubuntu jammy/main amd64 libnetfilter-conntrack3 amd64 1.0.9-1 [45.3 kB]
Get:4 http://archive.ubuntu.com/ubuntu jammy/main amd64 libnftnl11 amd64 1.2.1-1build1 [65.5 kB]
Get:5 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 iptables amd64 1.8.7-1ubuntu5.1 [455 kB]
Get:6 http://archive.ubuntu.com/ubuntu jammy/main amd64 libpsl5 amd64 0.21.0-1.2build2 [58.4 kB]
Get:7 http://archive.ubuntu.com/ubuntu jammy/main amd64 publicsuffix all 20211207.1025-1 [129 kB]
Get:8 http://archive.ubuntu.com/ubuntu jammy-updates/universe amd64 uidmap amd64 1:4.8.1-2ubuntu2.1 [22.4 kB]
Get:9 http://archive.ubuntu.com/ubuntu jammy/universe amd64 golang-github-containers-image all 5.16.0-3 [29.3 kB]
Get:10 http://archive.ubuntu.com/ubuntu jammy/universe amd64 golang-github-containers-common all 0.44.4+ds1-1 [28.1 kB]
Get:11 http://archive.ubuntu.com/ubuntu jammy/main amd64 libassuan0 amd64 2.5.5-1build1 [38.2 kB]
Get:12 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gpgconf amd64 2.2.27-3ubuntu2.1 [94.2 kB]
Get:13 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libksba8 amd64 1.6.0-2ubuntu0.2 [119 kB]
Get:14 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libsasl2-modules-db amd64 2.1.27+dfsg2-3ubuntu1.2 [20.5 kB]
Get:15 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libsasl2-2 amd64 2.1.27+dfsg2-3ubuntu1.2 [53.8 kB]
Get:16 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libldap-2.5-0 amd64 2.5.16+dfsg-0ubuntu0.22.04.1 [183 kB]
Get:17 http://archive.ubuntu.com/ubuntu jammy/main amd64 libnpth0 amd64 1.6-3build2 [8664 B]
Get:18 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 dirmngr amd64 2.2.27-3ubuntu2.1 [293 kB]
Get:19 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gnupg-l10n all 2.2.27-3ubuntu2.1 [54.4 kB]
Get:20 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gnupg-utils amd64 2.2.27-3ubuntu2.1 [308 kB]
Get:21 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gpg amd64 2.2.27-3ubuntu2.1 [519 kB]
Get:22 http://archive.ubuntu.com/ubuntu jammy/main amd64 pinentry-curses amd64 1.1.1-1build2 [34.4 kB]
Get:23 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gpg-agent amd64 2.2.27-3ubuntu2.1 [209 kB]
Get:24 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gpg-wks-client amd64 2.2.27-3ubuntu2.1 [62.7 kB]
Get:25 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gpg-wks-server amd64 2.2.27-3ubuntu2.1 [57.5 kB]
Get:26 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gpgsm amd64 2.2.27-3ubuntu2.1 [197 kB]
Get:27 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 gnupg all 2.2.27-3ubuntu2.1 [315 kB]
Get:28 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libgpgme11 amd64 1.16.0-1.2ubuntu4.1 [136 kB]
Get:29 http://archive.ubuntu.com/ubuntu jammy/main amd64 libarchive13 amd64 3.6.0-1ubuntu1 [368 kB]
Get:30 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libavahi-common-data amd64 0.8-5ubuntu5.1 [23.5 kB]
Get:31 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libavahi-common3 amd64 0.8-5ubuntu5.1 [23.7 kB]
Get:32 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libavahi-client3 amd64 0.8-5ubuntu5.1 [28.0 kB]
Get:33 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libavahi-glib1 amd64 0.8-5ubuntu5.1 [8302 B]
Get:34 http://archive.ubuntu.com/ubuntu jammy/main amd64 libproxy1v5 amd64 0.4.17-2 [51.9 kB]
Get:35 http://archive.ubuntu.com/ubuntu jammy/main amd64 glib-networking-common all 2.72.0-1 [3718 B]
Get:36 http://archive.ubuntu.com/ubuntu jammy/main amd64 glib-networking-services amd64 2.72.0-1 [9982 B]
Get:37 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 dbus-user-session amd64 1.12.20-2ubuntu4.1 [9442 B]
Get:38 http://archive.ubuntu.com/ubuntu jammy/main amd64 libdconf1 amd64 0.40.0-3 [40.5 kB]
Get:39 http://archive.ubuntu.com/ubuntu jammy/main amd64 dconf-service amd64 0.40.0-3 [28.5 kB]
Get:40 http://archive.ubuntu.com/ubuntu jammy/main amd64 dconf-gsettings-backend amd64 0.40.0-3 [22.8 kB]
Get:41 http://archive.ubuntu.com/ubuntu jammy/main amd64 session-migration amd64 0.3.6 [9774 B]
Get:42 http://archive.ubuntu.com/ubuntu jammy/main amd64 gsettings-desktop-schemas all 42.0-1ubuntu1 [31.1 kB]
Get:43 http://archive.ubuntu.com/ubuntu jammy/main amd64 glib-networking amd64 2.72.0-1 [69.8 kB]
Get:44 http://archive.ubuntu.com/ubuntu jammy/main amd64 libsoup2.4-common all 2.74.2-3 [4008 B]
Get:45 http://archive.ubuntu.com/ubuntu jammy/main amd64 libbrotli1 amd64 1.0.9-2build6 [315 kB]
Get:46 http://archive.ubuntu.com/ubuntu jammy/main amd64 libsoup2.4-1 amd64 2.74.2-3 [287 kB]
Get:47 http://archive.ubuntu.com/ubuntu jammy/universe amd64 libostree-1-1 amd64 2022.2-3 [333 kB]
Get:48 http://archive.ubuntu.com/ubuntu jammy/universe amd64 buildah amd64 1.23.1+ds1-2 [6094 kB]
Get:49 http://archive.ubuntu.com/ubuntu jammy/universe amd64 catatonit amd64 0.1.7-1 [307 kB]
Get:50 http://archive.ubuntu.com/ubuntu jammy/universe amd64 conmon amd64 2.0.25+ds1-1.1 [35.1 kB]
Get:51 http://archive.ubuntu.com/ubuntu jammy/universe amd64 containernetworking-plugins amd64 0.9.1+ds1-1 [6422 kB]
Get:52 http://archive.ubuntu.com/ubuntu jammy/main amd64 libyajl2 amd64 2.1.0-3build2 [20.6 kB]
Get:53 http://archive.ubuntu.com/ubuntu jammy/universe amd64 crun amd64 0.17+dfsg-1.1 [300 kB]
Get:54 http://archive.ubuntu.com/ubuntu jammy/main amd64 dns-root-data all 2021011101 [5256 B]
Get:55 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 dnsmasq-base amd64 2.86-1.1ubuntu0.3 [354 kB]
Get:56 http://archive.ubuntu.com/ubuntu jammy/universe amd64 fuse-overlayfs amd64 1.7.1-1 [44.7 kB]
Get:57 http://archive.ubuntu.com/ubuntu jammy/universe amd64 golang-github-containernetworking-plugin-dnsname amd64 1.3.1+ds1-2 [1083 kB]
Get:58 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libldap-common all 2.5.16+dfsg-0ubuntu0.22.04.1 [15.8 kB]
Get:59 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 libsasl2-modules amd64 2.1.27+dfsg2-3ubuntu1.2 [68.8 kB]
Get:60 http://archive.ubuntu.com/ubuntu jammy/main amd64 libslirp0 amd64 4.6.1-1build1 [61.5 kB]
Get:61 http://archive.ubuntu.com/ubuntu jammy-updates/universe amd64 podman amd64 3.4.4+ds1-1ubuntu1.22.04.2 [10.6 MB]
Get:62 http://archive.ubuntu.com/ubuntu jammy/universe amd64 slirp4netns amd64 1.0.1-2 [28.2 kB]
Fetched 30.7 MB in 2s (20.3 MB/s)         
Extracting templates from packages: 100%
Selecting previously unselected package libip6tc2:amd64.
(Reading database ... 16261 files and directories currently installed.)
Preparing to unpack .../00-libip6tc2_1.8.7-1ubuntu5.1_amd64.deb ...
Unpacking libip6tc2:amd64 (1.8.7-1ubuntu5.1) ...
Selecting previously unselected package libnfnetlink0:amd64.
Preparing to unpack .../01-libnfnetlink0_1.0.1-3build3_amd64.deb ...
Unpacking libnfnetlink0:amd64 (1.0.1-3build3) ...
Selecting previously unselected package libnetfilter-conntrack3:amd64.
Preparing to unpack .../02-libnetfilter-conntrack3_1.0.9-1_amd64.deb ...
Unpacking libnetfilter-conntrack3:amd64 (1.0.9-1) ...
Selecting previously unselected package libnftnl11:amd64.
Preparing to unpack .../03-libnftnl11_1.2.1-1build1_amd64.deb ...
Unpacking libnftnl11:amd64 (1.2.1-1build1) ...
Selecting previously unselected package iptables.
Preparing to unpack .../04-iptables_1.8.7-1ubuntu5.1_amd64.deb ...
Unpacking iptables (1.8.7-1ubuntu5.1) ...
Selecting previously unselected package libpsl5:amd64.
Preparing to unpack .../05-libpsl5_0.21.0-1.2build2_amd64.deb ...
Unpacking libpsl5:amd64 (0.21.0-1.2build2) ...
Selecting previously unselected package publicsuffix.
Preparing to unpack .../06-publicsuffix_20211207.1025-1_all.deb ...
Unpacking publicsuffix (20211207.1025-1) ...
Selecting previously unselected package uidmap.
Preparing to unpack .../07-uidmap_1%3a4.8.1-2ubuntu2.1_amd64.deb ...
Unpacking uidmap (1:4.8.1-2ubuntu2.1) ...
Selecting previously unselected package golang-github-containers-image.
Preparing to unpack .../08-golang-github-containers-image_5.16.0-3_all.deb ...
Unpacking golang-github-containers-image (5.16.0-3) ...
Selecting previously unselected package golang-github-containers-common.
Preparing to unpack .../09-golang-github-containers-common_0.44.4+ds1-1_all.deb ...
Unpacking golang-github-containers-common (0.44.4+ds1-1) ...
Selecting previously unselected package libassuan0:amd64.
Preparing to unpack .../10-libassuan0_2.5.5-1build1_amd64.deb ...
Unpacking libassuan0:amd64 (2.5.5-1build1) ...
Selecting previously unselected package gpgconf.
Preparing to unpack .../11-gpgconf_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gpgconf (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package libksba8:amd64.
Preparing to unpack .../12-libksba8_1.6.0-2ubuntu0.2_amd64.deb ...
Unpacking libksba8:amd64 (1.6.0-2ubuntu0.2) ...
Selecting previously unselected package libsasl2-modules-db:amd64.
Preparing to unpack .../13-libsasl2-modules-db_2.1.27+dfsg2-3ubuntu1.2_amd64.deb ...
Unpacking libsasl2-modules-db:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Selecting previously unselected package libsasl2-2:amd64.
Preparing to unpack .../14-libsasl2-2_2.1.27+dfsg2-3ubuntu1.2_amd64.deb ...
Unpacking libsasl2-2:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Selecting previously unselected package libldap-2.5-0:amd64.
Preparing to unpack .../15-libldap-2.5-0_2.5.16+dfsg-0ubuntu0.22.04.1_amd64.deb ...
Unpacking libldap-2.5-0:amd64 (2.5.16+dfsg-0ubuntu0.22.04.1) ...
Selecting previously unselected package libnpth0:amd64.
Preparing to unpack .../16-libnpth0_1.6-3build2_amd64.deb ...
Unpacking libnpth0:amd64 (1.6-3build2) ...
Selecting previously unselected package dirmngr.
Preparing to unpack .../17-dirmngr_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking dirmngr (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gnupg-l10n.
Preparing to unpack .../18-gnupg-l10n_2.2.27-3ubuntu2.1_all.deb ...
Unpacking gnupg-l10n (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gnupg-utils.
Preparing to unpack .../19-gnupg-utils_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gnupg-utils (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gpg.
Preparing to unpack .../20-gpg_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gpg (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package pinentry-curses.
Preparing to unpack .../21-pinentry-curses_1.1.1-1build2_amd64.deb ...
Unpacking pinentry-curses (1.1.1-1build2) ...
Selecting previously unselected package gpg-agent.
Preparing to unpack .../22-gpg-agent_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gpg-agent (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gpg-wks-client.
Preparing to unpack .../23-gpg-wks-client_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gpg-wks-client (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gpg-wks-server.
Preparing to unpack .../24-gpg-wks-server_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gpg-wks-server (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gpgsm.
Preparing to unpack .../25-gpgsm_2.2.27-3ubuntu2.1_amd64.deb ...
Unpacking gpgsm (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package gnupg.
Preparing to unpack .../26-gnupg_2.2.27-3ubuntu2.1_all.deb ...
Unpacking gnupg (2.2.27-3ubuntu2.1) ...
Selecting previously unselected package libgpgme11:amd64.
Preparing to unpack .../27-libgpgme11_1.16.0-1.2ubuntu4.1_amd64.deb ...
Unpacking libgpgme11:amd64 (1.16.0-1.2ubuntu4.1) ...
Selecting previously unselected package libarchive13:amd64.
Preparing to unpack .../28-libarchive13_3.6.0-1ubuntu1_amd64.deb ...
Unpacking libarchive13:amd64 (3.6.0-1ubuntu1) ...
Selecting previously unselected package libavahi-common-data:amd64.
Preparing to unpack .../29-libavahi-common-data_0.8-5ubuntu5.1_amd64.deb ...
Unpacking libavahi-common-data:amd64 (0.8-5ubuntu5.1) ...
Selecting previously unselected package libavahi-common3:amd64.
Preparing to unpack .../30-libavahi-common3_0.8-5ubuntu5.1_amd64.deb ...
Unpacking libavahi-common3:amd64 (0.8-5ubuntu5.1) ...
Selecting previously unselected package libavahi-client3:amd64.
Preparing to unpack .../31-libavahi-client3_0.8-5ubuntu5.1_amd64.deb ...
Unpacking libavahi-client3:amd64 (0.8-5ubuntu5.1) ...
Selecting previously unselected package libavahi-glib1:amd64.
Preparing to unpack .../32-libavahi-glib1_0.8-5ubuntu5.1_amd64.deb ...
Unpacking libavahi-glib1:amd64 (0.8-5ubuntu5.1) ...
Selecting previously unselected package libproxy1v5:amd64.
Preparing to unpack .../33-libproxy1v5_0.4.17-2_amd64.deb ...
Unpacking libproxy1v5:amd64 (0.4.17-2) ...
Selecting previously unselected package glib-networking-common.
Preparing to unpack .../34-glib-networking-common_2.72.0-1_all.deb ...
Unpacking glib-networking-common (2.72.0-1) ...
Selecting previously unselected package glib-networking-services.
Preparing to unpack .../35-glib-networking-services_2.72.0-1_amd64.deb ...
Unpacking glib-networking-services (2.72.0-1) ...
Selecting previously unselected package dbus-user-session.
Preparing to unpack .../36-dbus-user-session_1.12.20-2ubuntu4.1_amd64.deb ...
Unpacking dbus-user-session (1.12.20-2ubuntu4.1) ...
Selecting previously unselected package libdconf1:amd64.
Preparing to unpack .../37-libdconf1_0.40.0-3_amd64.deb ...
Unpacking libdconf1:amd64 (0.40.0-3) ...
Selecting previously unselected package dconf-service.
Preparing to unpack .../38-dconf-service_0.40.0-3_amd64.deb ...
Unpacking dconf-service (0.40.0-3) ...
Selecting previously unselected package dconf-gsettings-backend:amd64.
Preparing to unpack .../39-dconf-gsettings-backend_0.40.0-3_amd64.deb ...
Unpacking dconf-gsettings-backend:amd64 (0.40.0-3) ...
Selecting previously unselected package session-migration.
Preparing to unpack .../40-session-migration_0.3.6_amd64.deb ...
Unpacking session-migration (0.3.6) ...
Selecting previously unselected package gsettings-desktop-schemas.
Preparing to unpack .../41-gsettings-desktop-schemas_42.0-1ubuntu1_all.deb ...
Unpacking gsettings-desktop-schemas (42.0-1ubuntu1) ...
Selecting previously unselected package glib-networking:amd64.
Preparing to unpack .../42-glib-networking_2.72.0-1_amd64.deb ...
Unpacking glib-networking:amd64 (2.72.0-1) ...
Selecting previously unselected package libsoup2.4-common.
Preparing to unpack .../43-libsoup2.4-common_2.74.2-3_all.deb ...
Unpacking libsoup2.4-common (2.74.2-3) ...
Selecting previously unselected package libbrotli1:amd64.
Preparing to unpack .../44-libbrotli1_1.0.9-2build6_amd64.deb ...
Unpacking libbrotli1:amd64 (1.0.9-2build6) ...
Selecting previously unselected package libsoup2.4-1:amd64.
Preparing to unpack .../45-libsoup2.4-1_2.74.2-3_amd64.deb ...
Unpacking libsoup2.4-1:amd64 (2.74.2-3) ...
Selecting previously unselected package libostree-1-1:amd64.
Preparing to unpack .../46-libostree-1-1_2022.2-3_amd64.deb ...
Unpacking libostree-1-1:amd64 (2022.2-3) ...
Selecting previously unselected package buildah.
Preparing to unpack .../47-buildah_1.23.1+ds1-2_amd64.deb ...
Unpacking buildah (1.23.1+ds1-2) ...
Selecting previously unselected package catatonit.
Preparing to unpack .../48-catatonit_0.1.7-1_amd64.deb ...
Unpacking catatonit (0.1.7-1) ...
Selecting previously unselected package conmon.
Preparing to unpack .../49-conmon_2.0.25+ds1-1.1_amd64.deb ...
Unpacking conmon (2.0.25+ds1-1.1) ...
Selecting previously unselected package containernetworking-plugins.
Preparing to unpack .../50-containernetworking-plugins_0.9.1+ds1-1_amd64.deb ...
Unpacking containernetworking-plugins (0.9.1+ds1-1) ...
Selecting previously unselected package libyajl2:amd64.
Preparing to unpack .../51-libyajl2_2.1.0-3build2_amd64.deb ...
Unpacking libyajl2:amd64 (2.1.0-3build2) ...
Selecting previously unselected package crun.
Preparing to unpack .../52-crun_0.17+dfsg-1.1_amd64.deb ...
Unpacking crun (0.17+dfsg-1.1) ...
Selecting previously unselected package dns-root-data.
Preparing to unpack .../53-dns-root-data_2021011101_all.deb ...
Unpacking dns-root-data (2021011101) ...
Selecting previously unselected package dnsmasq-base.
Preparing to unpack .../54-dnsmasq-base_2.86-1.1ubuntu0.3_amd64.deb ...
Unpacking dnsmasq-base (2.86-1.1ubuntu0.3) ...
Selecting previously unselected package fuse-overlayfs.
Preparing to unpack .../55-fuse-overlayfs_1.7.1-1_amd64.deb ...
Unpacking fuse-overlayfs (1.7.1-1) ...
Selecting previously unselected package golang-github-containernetworking-plugin-dnsname.
Preparing to unpack .../56-golang-github-containernetworking-plugin-dnsname_1.3.1+ds1-2_amd64.deb ...
Unpacking golang-github-containernetworking-plugin-dnsname (1.3.1+ds1-2) ...
Selecting previously unselected package libldap-common.
Preparing to unpack .../57-libldap-common_2.5.16+dfsg-0ubuntu0.22.04.1_all.deb ...
Unpacking libldap-common (2.5.16+dfsg-0ubuntu0.22.04.1) ...
Selecting previously unselected package libsasl2-modules:amd64.
Preparing to unpack .../58-libsasl2-modules_2.1.27+dfsg2-3ubuntu1.2_amd64.deb ...
Unpacking libsasl2-modules:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Selecting previously unselected package libslirp0:amd64.
Preparing to unpack .../59-libslirp0_4.6.1-1build1_amd64.deb ...
Unpacking libslirp0:amd64 (4.6.1-1build1) ...
Selecting previously unselected package podman.
Preparing to unpack .../60-podman_3.4.4+ds1-1ubuntu1.22.04.2_amd64.deb ...
Unpacking podman (3.4.4+ds1-1ubuntu1.22.04.2) ...
Selecting previously unselected package slirp4netns.
Preparing to unpack .../61-slirp4netns_1.0.1-2_amd64.deb ...
Unpacking slirp4netns (1.0.1-2) ...
Setting up libksba8:amd64 (1.6.0-2ubuntu0.2) ...
Setting up session-migration (0.3.6) ...
Created symlink /etc/systemd/user/graphical-session-pre.target.wants/session-migration.service → /usr/lib/systemd/user/session-migration.service.
Setting up libproxy1v5:amd64 (0.4.17-2) ...
Setting up libpsl5:amd64 (0.21.0-1.2build2) ...
Setting up libarchive13:amd64 (3.6.0-1ubuntu1) ...
Setting up libip6tc2:amd64 (1.8.7-1ubuntu5.1) ...
Setting up uidmap (1:4.8.1-2ubuntu2.1) ...
Setting up libbrotli1:amd64 (1.0.9-2build6) ...
Setting up libsasl2-modules:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Setting up libyajl2:amd64 (2.1.0-3build2) ...
Setting up libnftnl11:amd64 (1.2.1-1build1) ...
Setting up libnpth0:amd64 (1.6-3build2) ...
Setting up libassuan0:amd64 (2.5.5-1build1) ...
Setting up libldap-common (2.5.16+dfsg-0ubuntu0.22.04.1) ...
Setting up dns-root-data (2021011101) ...
Setting up libsasl2-modules-db:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Setting up libdconf1:amd64 (0.40.0-3) ...
Setting up dbus-user-session (1.12.20-2ubuntu4.1) ...
Setting up golang-github-containers-image (5.16.0-3) ...
Setting up gnupg-l10n (2.2.27-3ubuntu2.1) ...
Setting up conmon (2.0.25+ds1-1.1) ...
Setting up catatonit (0.1.7-1) ...
Setting up libavahi-common-data:amd64 (0.8-5ubuntu5.1) ...
Setting up libsasl2-2:amd64 (2.1.27+dfsg2-3ubuntu1.2) ...
Setting up libsoup2.4-common (2.74.2-3) ...
Setting up libslirp0:amd64 (4.6.1-1build1) ...
Setting up libnfnetlink0:amd64 (1.0.1-3build3) ...
Setting up gpgconf (2.2.27-3ubuntu2.1) ...
Setting up fuse-overlayfs (1.7.1-1) ...
Setting up golang-github-containers-common (0.44.4+ds1-1) ...
Setting up glib-networking-common (2.72.0-1) ...
Setting up publicsuffix (20211207.1025-1) ...
Setting up gpg (2.2.27-3ubuntu2.1) ...
Setting up gnupg-utils (2.2.27-3ubuntu2.1) ...
Setting up pinentry-curses (1.1.1-1build2) ...
Setting up glib-networking-services (2.72.0-1) ...
Setting up gpg-agent (2.2.27-3ubuntu2.1) ...
Created symlink /etc/systemd/user/sockets.target.wants/gpg-agent-browser.socket → /usr/lib/systemd/user/gpg-agent-browser.socket.
Created symlink /etc/systemd/user/sockets.target.wants/gpg-agent-extra.socket → /usr/lib/systemd/user/gpg-agent-extra.socket.
Created symlink /etc/systemd/user/sockets.target.wants/gpg-agent-ssh.socket → /usr/lib/systemd/user/gpg-agent-ssh.socket.
Created symlink /etc/systemd/user/sockets.target.wants/gpg-agent.socket → /usr/lib/systemd/user/gpg-agent.socket.
Setting up slirp4netns (1.0.1-2) ...
Setting up crun (0.17+dfsg-1.1) ...
Setting up gpgsm (2.2.27-3ubuntu2.1) ...
Setting up libavahi-common3:amd64 (0.8-5ubuntu5.1) ...
Setting up dconf-service (0.40.0-3) ...
Setting up libgpgme11:amd64 (1.16.0-1.2ubuntu4.1) ...
Setting up libldap-2.5-0:amd64 (2.5.16+dfsg-0ubuntu0.22.04.1) ...
Setting up dirmngr (2.2.27-3ubuntu2.1) ...
Created symlink /etc/systemd/user/sockets.target.wants/dirmngr.socket → /usr/lib/systemd/user/dirmngr.socket.
Setting up gpg-wks-server (2.2.27-3ubuntu2.1) ...
Setting up libnetfilter-conntrack3:amd64 (1.0.9-1) ...
Setting up libavahi-glib1:amd64 (0.8-5ubuntu5.1) ...
Setting up libavahi-client3:amd64 (0.8-5ubuntu5.1) ...
Setting up gpg-wks-client (2.2.27-3ubuntu2.1) ...
Setting up dconf-gsettings-backend:amd64 (0.40.0-3) ...
Setting up iptables (1.8.7-1ubuntu5.1) ...
update-alternatives: using /usr/sbin/iptables-legacy to provide /usr/sbin/iptables (iptables) in auto mode
update-alternatives: using /usr/sbin/ip6tables-legacy to provide /usr/sbin/ip6tables (ip6tables) in auto mode
update-alternatives: using /usr/sbin/iptables-nft to provide /usr/sbin/iptables (iptables) in auto mode
update-alternatives: using /usr/sbin/ip6tables-nft to provide /usr/sbin/ip6tables (ip6tables) in auto mode
update-alternatives: using /usr/sbin/arptables-nft to provide /usr/sbin/arptables (arptables) in auto mode
update-alternatives: using /usr/sbin/ebtables-nft to provide /usr/sbin/ebtables (ebtables) in auto mode
Setting up dnsmasq-base (2.86-1.1ubuntu0.3) ...
Setting up containernetworking-plugins (0.9.1+ds1-1) ...
Setting up golang-github-containernetworking-plugin-dnsname (1.3.1+ds1-2) ...
Setting up gnupg (2.2.27-3ubuntu2.1) ...
Setting up gsettings-desktop-schemas (42.0-1ubuntu1) ...
Setting up podman (3.4.4+ds1-1ubuntu1.22.04.2) ...
Created symlink /etc/systemd/user/default.target.wants/podman.service → /usr/lib/systemd/user/podman.service.
Created symlink /etc/systemd/user/sockets.target.wants/podman.socket → /usr/lib/systemd/user/podman.socket.
Created symlink /etc/systemd/system/default.target.wants/podman.service → /lib/systemd/system/podman.service.
Created symlink /etc/systemd/system/sockets.target.wants/podman.socket → /lib/systemd/system/podman.socket.
Created symlink /etc/systemd/system/default.target.wants/podman-auto-update.service → /lib/systemd/system/podman-auto-update.service.
Created symlink /etc/systemd/system/timers.target.wants/podman-auto-update.timer → /lib/systemd/system/podman-auto-update.timer.
Created symlink /etc/systemd/system/default.target.wants/podman-restart.service → /lib/systemd/system/podman-restart.service.
Processing triggers for libglib2.0-0:amd64 (2.72.4-0ubuntu2.2) ...
Processing triggers for libc-bin (2.35-0ubuntu3.4) ...
Processing triggers for dbus (1.12.20-2ubuntu4.1) ...
Setting up glib-networking:amd64 (2.72.0-1) ...
Setting up libsoup2.4-1:amd64 (2.74.2-3) ...
Setting up libostree-1-1:amd64 (2022.2-3) ...
Setting up buildah (1.23.1+ds1-2) ...
Processing triggers for libc-bin (2.35-0ubuntu3.4) ...
root@podman:~# podman run hello-world
Resolved "hello-world" as an alias (/etc/containers/registries.conf.d/shortnames.conf)
Trying to pull docker.io/library/hello-world:latest...
Getting image source signatures
Copying blob 719385e32844 done  
Copying config 9c7a54a9a4 done  
Writing manifest to image destination
Storing signatures

Hello from Docker!
This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:
 1. The Docker client contacted the Docker daemon.
 2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
    (amd64)
 3. The Docker daemon created a new container from that image which runs the
    executable that produces the output you are currently reading.
 4. The Docker daemon streamed that output to the Docker client, which sent it
    to your terminal.

To try something more ambitious, you can run an Ubuntu container with:
 $ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:
 https://hub.docker.com/

For more examples and ideas, visit:
 https://docs.docker.com/get-started/

root@podman:~# 

Okay apparently I didn’t try Debian, but it worked for me. Fedora however doesn’t:

test@debian-vm ~ [1]> incus launch images:fedora/39 fedct2 -c security.nesting=true
Creating fedct2
Starting fedct2
test@debian-vm ~> incus exec fedct2 bash
[root@fedct2 ~]# dnf install podman
determining the fastest mirror (144 hosts).. done.             [===                                                       ] ---  B/s |   0  B     --:-- ETA
Fedora 39 - x86_64                                                                                                          7.6 MB/s |  89 MB     00:11    
Fedora 39 openh264 (From Cisco) - x86_64                                                                                    7.4 kB/s | 2.5 kB     00:00    
Fedora 39 - x86_64 - Updates                                                                                                8.5 MB/s |  14 MB     00:01    
Dependencies resolved.
============================================================================================================================================================
 Package                                         Architecture              Version                                         Repository                  Size
============================================================================================================================================================
Installing:
 podman                                          x86_64                    5:4.7.2-1.fc39                                  updates                     15 M
Installing dependencies:
 catatonit                                       x86_64                    0.1.7-18.fc39                                   fedora                     321 k
 conmon                                          x86_64                    2:2.1.8-2.fc39                                  updates                     53 k
 containers-common                               noarch                    4:1-95.fc39                                     fedora                      96 k
 containers-common-extra                         noarch                    4:1-95.fc39                                     fedora                      13 k
 criu                                            x86_64                    3.18-3.fc39                                     fedora                     556 k
 crun                                            x86_64                    1.11.1-1.fc39                                   updates                    218 k
 fuse-common                                     x86_64                    3.16.1-1.fc39                                   fedora                     8.3 k
 fuse3                                           x86_64                    3.16.1-1.fc39                                   fedora                      57 k
 fuse3-libs                                      x86_64                    3.16.1-1.fc39                                   fedora                      94 k
 gpgme                                           x86_64                    1.20.0-5.fc39                                   fedora                     210 k
 gvisor-tap-vsock-gvforwarder                    x86_64                    6:0.7.1-1.fc39                                  updates                    1.8 M
 iptables-legacy                                 x86_64                    1.8.9-5.fc39                                    fedora                      52 k
 iptables-legacy-libs                            x86_64                    1.8.9-5.fc39                                    fedora                      38 k
 jansson                                         x86_64                    2.13.1-7.fc39                                   fedora                      44 k
 libbsd                                          x86_64                    0.11.7-5.fc39                                   fedora                     113 k
 libmd                                           x86_64                    1.1.0-2.fc39                                    fedora                      47 k
 libnet                                          x86_64                    1.3-1.fc39                                      updates                     60 k
 libnftnl                                        x86_64                    1.2.6-2.fc39                                    fedora                      83 k
 libslirp                                        x86_64                    4.7.0-4.fc39                                    fedora                      75 k
 netavark                                        x86_64                    1.8.0-2.fc39                                    updates                    3.2 M
 nftables                                        x86_64                    1:1.0.7-3.fc39                                  fedora                     413 k
 protobuf-c                                      x86_64                    1.4.1-5.fc39                                    fedora                      39 k
 qemu-user-static-aarch64                        x86_64                    2:8.1.1-1.fc39                                  updates                    2.3 M
 qemu-user-static-alpha                          x86_64                    2:8.1.1-1.fc39                                  updates                    1.2 M
 qemu-user-static-arm                            x86_64                    2:8.1.1-1.fc39                                  updates                    1.9 M
 qemu-user-static-cris                           x86_64                    2:8.1.1-1.fc39                                  updates                    1.2 M
 qemu-user-static-hexagon                        x86_64                    2:8.1.1-1.fc39                                  updates                    1.6 M
 qemu-user-static-hppa                           x86_64                    2:8.1.1-1.fc39                                  updates                    1.2 M
 qemu-user-static-loongarch64                    x86_64                    2:8.1.1-1.fc39                                  updates                    1.3 M
 qemu-user-static-m68k                           x86_64                    2:8.1.1-1.fc39                                  updates                    1.3 M
 qemu-user-static-microblaze                     x86_64                    2:8.1.1-1.fc39                                  updates                    1.5 M
 qemu-user-static-mips                           x86_64                    2:8.1.1-1.fc39                                  updates                    3.4 M
 qemu-user-static-nios2                          x86_64                    2:8.1.1-1.fc39                                  updates                    1.2 M
 qemu-user-static-or1k                           x86_64                    2:8.1.1-1.fc39                                  updates                    1.2 M
 qemu-user-static-ppc                            x86_64                    2:8.1.1-1.fc39                                  updates                    2.3 M
 qemu-user-static-riscv                          x86_64                    2:8.1.1-1.fc39                                  updates                    1.8 M
 qemu-user-static-s390x                          x86_64                    2:8.1.1-1.fc39                                  updates                    1.3 M
 qemu-user-static-sh4                            x86_64                    2:8.1.1-1.fc39                                  updates                    1.5 M
 qemu-user-static-sparc                          x86_64                    2:8.1.1-1.fc39                                  updates                    1.9 M
 qemu-user-static-x86                            x86_64                    2:8.1.1-1.fc39                                  updates                    1.8 M
 qemu-user-static-xtensa                         x86_64                    2:8.1.1-1.fc39                                  updates                    2.0 M
 shadow-utils-subid                              x86_64                    2:4.14.0-2.fc39                                 updates                     29 k
 yajl                                            x86_64                    2.1.0-22.fc39                                   fedora                      38 k
Installing weak dependencies:
 aardvark-dns                                    x86_64                    1.8.0-1.fc39                                    updates                    927 k
 criu-libs                                       x86_64                    3.18-3.fc39                                     fedora                      33 k
 fuse-overlayfs                                  x86_64                    1.12-2.fc39                                     fedora                      67 k
 gvisor-tap-vsock                                x86_64                    6:0.7.1-1.fc39                                  updates                    3.7 M
 passt                                           x86_64                    0^20231004.gf851084-1.fc39                      updates                    187 k
 qemu-user-static                                x86_64                    2:8.1.1-1.fc39                                  updates                     24 k
 slirp4netns                                     x86_64                    1.2.2-1.fc39                                    updates                     47 k

Transaction Summary
============================================================================================================================================================
Install  51 Packages

Total download size: 59 M
Installed size: 232 M
Is this ok [y/N]: y 
Downloading Packages:
done.a 39 - x86_64                                          0% [                                                          ] 3.0 MB/s |  25 kB     00:04 ETA
(1/51): containers-common-extra-1-95.fc39.noarch.rpm                                                                        249 kB/s |  13 kB     00:00    
(2/51): containers-common-1-95.fc39.noarch.rpm                                                                              1.1 MB/s |  96 kB     00:00    
(3/51): criu-libs-3.18-3.fc39.x86_64.rpm                                                                                    1.9 MB/s |  33 kB     00:00    
(4/51): catatonit-0.1.7-18.fc39.x86_64.rpm                                                                                  2.6 MB/s | 321 kB     00:00    
(5/51): fuse-common-3.16.1-1.fc39.x86_64.rpm                                                                                443 kB/s | 8.3 kB     00:00    
(6/51): fuse3-3.16.1-1.fc39.x86_64.rpm                                                                                      3.2 MB/s |  57 kB     00:00    
(7/51): fuse-overlayfs-1.12-2.fc39.x86_64.rpm                                                                               2.2 MB/s |  67 kB     00:00    
(8/51): criu-3.18-3.fc39.x86_64.rpm                                                                                         5.0 MB/s | 556 kB     00:00    
(9/51): fuse3-libs-3.16.1-1.fc39.x86_64.rpm                                                                                 3.4 MB/s |  94 kB     00:00    
(10/51): iptables-legacy-1.8.9-5.fc39.x86_64.rpm                                                                            3.1 MB/s |  52 kB     00:00    
(11/51): iptables-legacy-libs-1.8.9-5.fc39.x86_64.rpm                                                                       2.2 MB/s |  38 kB     00:00    
(12/51): jansson-2.13.1-7.fc39.x86_64.rpm                                                                                   2.7 MB/s |  44 kB     00:00    
(13/51): gpgme-1.20.0-5.fc39.x86_64.rpm                                                                                     4.1 MB/s | 210 kB     00:00    
(14/51): libmd-1.1.0-2.fc39.x86_64.rpm                                                                                      2.8 MB/s |  47 kB     00:00    
(15/51): libbsd-0.11.7-5.fc39.x86_64.rpm                                                                                    3.5 MB/s | 113 kB     00:00    
(16/51): libnftnl-1.2.6-2.fc39.x86_64.rpm                                                                                   2.7 MB/s |  83 kB     00:00    
(17/51): libslirp-4.7.0-4.fc39.x86_64.rpm                                                                                   2.2 MB/s |  75 kB     00:00    
(18/51): protobuf-c-1.4.1-5.fc39.x86_64.rpm                                                                                 1.6 MB/s |  39 kB     00:00    
(19/51): yajl-2.1.0-22.fc39.x86_64.rpm                                                                                      2.4 MB/s |  38 kB     00:00    
(20/51): conmon-2.1.8-2.fc39.x86_64.rpm                                                                                     3.1 MB/s |  53 kB     00:00    
(21/51): nftables-1.0.7-3.fc39.x86_64.rpm                                                                                   4.8 MB/s | 413 kB     00:00    
(22/51): crun-1.11.1-1.fc39.x86_64.rpm                                                                                      4.7 MB/s | 218 kB     00:00    
(23/51): aardvark-dns-1.8.0-1.fc39.x86_64.rpm                                                                               5.4 MB/s | 927 kB     00:00    
(24/51): libnet-1.3-1.fc39.x86_64.rpm                                                                                       3.6 MB/s |  60 kB     00:00    
(25/51): gvisor-tap-vsock-gvforwarder-0.7.1-1.fc39.x86_64.rpm                                                               6.1 MB/s | 1.8 MB     00:00    
(26/51): passt-0^20231004.gf851084-1.fc39.x86_64.rpm                                                                        5.3 MB/s | 187 kB     00:00    
(27/51): gvisor-tap-vsock-0.7.1-1.fc39.x86_64.rpm                                                                           6.5 MB/s | 3.7 MB     00:00    
(28/51): qemu-user-static-8.1.1-1.fc39.x86_64.rpm                                                                           1.4 MB/s |  24 kB     00:00    
(29/51): netavark-1.8.0-2.fc39.x86_64.rpm                                                                                   5.9 MB/s | 3.2 MB     00:00    
(30/51): qemu-user-static-alpha-8.1.1-1.fc39.x86_64.rpm                                                                     5.9 MB/s | 1.2 MB     00:00    
(31/51): qemu-user-static-aarch64-8.1.1-1.fc39.x86_64.rpm                                                                   7.3 MB/s | 2.3 MB     00:00    
(32/51): qemu-user-static-cris-8.1.1-1.fc39.x86_64.rpm                                                                      7.0 MB/s | 1.2 MB     00:00    
(33/51): qemu-user-static-arm-8.1.1-1.fc39.x86_64.rpm                                                                       7.2 MB/s | 1.9 MB     00:00    
(34/51): qemu-user-static-hexagon-8.1.1-1.fc39.x86_64.rpm                                                                   7.0 MB/s | 1.6 MB     00:00    
(35/51): qemu-user-static-hppa-8.1.1-1.fc39.x86_64.rpm                                                                      7.0 MB/s | 1.2 MB     00:00    
(36/51): qemu-user-static-loongarch64-8.1.1-1.fc39.x86_64.rpm                                                               7.4 MB/s | 1.3 MB     00:00    
(37/51): qemu-user-static-m68k-8.1.1-1.fc39.x86_64.rpm                                                                      7.1 MB/s | 1.3 MB     00:00    
(38/51): qemu-user-static-microblaze-8.1.1-1.fc39.x86_64.rpm                                                                7.0 MB/s | 1.5 MB     00:00    
(39/51): qemu-user-static-nios2-8.1.1-1.fc39.x86_64.rpm                                                                     7.3 MB/s | 1.2 MB     00:00    
(40/51): qemu-user-static-mips-8.1.1-1.fc39.x86_64.rpm                                                                      7.2 MB/s | 3.4 MB     00:00    
(41/51): qemu-user-static-or1k-8.1.1-1.fc39.x86_64.rpm                                                                      7.1 MB/s | 1.2 MB     00:00    
(42/51): qemu-user-static-ppc-8.1.1-1.fc39.x86_64.rpm                                                                       7.6 MB/s | 2.3 MB     00:00    
(43/51): qemu-user-static-riscv-8.1.1-1.fc39.x86_64.rpm                                                                     7.2 MB/s | 1.8 MB     00:00    
(44/51): podman-4.7.2-1.fc39.x86_64.rpm                                                                                     7.1 MB/s |  15 MB     00:02    
(45/51): qemu-user-static-s390x-8.1.1-1.fc39.x86_64.rpm                                                                     6.8 MB/s | 1.3 MB     00:00    
(46/51): qemu-user-static-sh4-8.1.1-1.fc39.x86_64.rpm                                                                       7.2 MB/s | 1.5 MB     00:00    
(47/51): qemu-user-static-sparc-8.1.1-1.fc39.x86_64.rpm                                                                     8.0 MB/s | 1.9 MB     00:00    
(48/51): shadow-utils-subid-4.14.0-2.fc39.x86_64.rpm                                                                        1.6 MB/s |  29 kB     00:00    
(49/51): slirp4netns-1.2.2-1.fc39.x86_64.rpm                                                                                2.7 MB/s |  47 kB     00:00    
(50/51): qemu-user-static-x86-8.1.1-1.fc39.x86_64.rpm                                                                       7.5 MB/s | 1.8 MB     00:00    
(51/51): qemu-user-static-xtensa-8.1.1-1.fc39.x86_64.rpm                                                                    6.9 MB/s | 2.0 MB     00:00    
------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                        17 MB/s |  59 MB     00:03     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                    1/1 
  Installing       : gvisor-tap-vsock-gvforwarder-6:0.7.1-1.fc39.x86_64                                                                                1/51 
  Installing       : gvisor-tap-vsock-6:0.7.1-1.fc39.x86_64                                                                                            2/51 
  Installing       : qemu-user-static-x86-2:8.1.1-1.fc39.x86_64                                                                                        3/51 
  Running scriptlet: qemu-user-static-x86-2:8.1.1-1.fc39.x86_64                                                                                        3/51 
  Installing       : qemu-user-static-arm-2:8.1.1-1.fc39.x86_64                                                                                        4/51 
  Running scriptlet: qemu-user-static-arm-2:8.1.1-1.fc39.x86_64                                                                                        4/51 
  Installing       : qemu-user-static-aarch64-2:8.1.1-1.fc39.x86_64                                                                                    5/51 
  Running scriptlet: qemu-user-static-aarch64-2:8.1.1-1.fc39.x86_64                                                                                    5/51 
  Installing       : protobuf-c-1.4.1-5.fc39.x86_64                                                                                                    6/51 
  Installing       : fuse3-libs-3.16.1-1.fc39.x86_64                                                                                                   7/51 
  Installing       : shadow-utils-subid-2:4.14.0-2.fc39.x86_64                                                                                         8/51 
  Installing       : qemu-user-static-xtensa-2:8.1.1-1.fc39.x86_64                                                                                     9/51 
  Running scriptlet: qemu-user-static-xtensa-2:8.1.1-1.fc39.x86_64                                                                                     9/51 
  Installing       : qemu-user-static-sparc-2:8.1.1-1.fc39.x86_64                                                                                     10/51 
  Running scriptlet: qemu-user-static-sparc-2:8.1.1-1.fc39.x86_64                                                                                     10/51 
  Installing       : qemu-user-static-sh4-2:8.1.1-1.fc39.x86_64                                                                                       11/51 
  Running scriptlet: qemu-user-static-sh4-2:8.1.1-1.fc39.x86_64                                                                                       11/51 
  Installing       : qemu-user-static-s390x-2:8.1.1-1.fc39.x86_64                                                                                     12/51 
  Running scriptlet: qemu-user-static-s390x-2:8.1.1-1.fc39.x86_64                                                                                     12/51 
  Installing       : qemu-user-static-riscv-2:8.1.1-1.fc39.x86_64                                                                                     13/51 
  Running scriptlet: qemu-user-static-riscv-2:8.1.1-1.fc39.x86_64                                                                                     13/51 
  Installing       : qemu-user-static-ppc-2:8.1.1-1.fc39.x86_64                                                                                       14/51 
  Running scriptlet: qemu-user-static-ppc-2:8.1.1-1.fc39.x86_64                                                                                       14/51 
  Installing       : qemu-user-static-or1k-2:8.1.1-1.fc39.x86_64                                                                                      15/51 
  Running scriptlet: qemu-user-static-or1k-2:8.1.1-1.fc39.x86_64                                                                                      15/51 
  Installing       : qemu-user-static-nios2-2:8.1.1-1.fc39.x86_64                                                                                     16/51 
  Running scriptlet: qemu-user-static-nios2-2:8.1.1-1.fc39.x86_64                                                                                     16/51 
  Installing       : qemu-user-static-mips-2:8.1.1-1.fc39.x86_64                                                                                      17/51 
  Running scriptlet: qemu-user-static-mips-2:8.1.1-1.fc39.x86_64                                                                                      17/51 
  Installing       : qemu-user-static-microblaze-2:8.1.1-1.fc39.x86_64                                                                                18/51 
  Running scriptlet: qemu-user-static-microblaze-2:8.1.1-1.fc39.x86_64                                                                                18/51 
  Installing       : qemu-user-static-m68k-2:8.1.1-1.fc39.x86_64                                                                                      19/51 
  Running scriptlet: qemu-user-static-m68k-2:8.1.1-1.fc39.x86_64                                                                                      19/51 
  Installing       : qemu-user-static-loongarch64-2:8.1.1-1.fc39.x86_64                                                                               20/51 
  Running scriptlet: qemu-user-static-loongarch64-2:8.1.1-1.fc39.x86_64                                                                               20/51 
  Installing       : qemu-user-static-hppa-2:8.1.1-1.fc39.x86_64                                                                                      21/51 
  Running scriptlet: qemu-user-static-hppa-2:8.1.1-1.fc39.x86_64                                                                                      21/51 
  Installing       : qemu-user-static-hexagon-2:8.1.1-1.fc39.x86_64                                                                                   22/51 
  Running scriptlet: qemu-user-static-hexagon-2:8.1.1-1.fc39.x86_64                                                                                   22/51 
  Installing       : qemu-user-static-cris-2:8.1.1-1.fc39.x86_64                                                                                      23/51 
  Running scriptlet: qemu-user-static-cris-2:8.1.1-1.fc39.x86_64                                                                                      23/51 
  Installing       : qemu-user-static-alpha-2:8.1.1-1.fc39.x86_64                                                                                     24/51 
  Running scriptlet: qemu-user-static-alpha-2:8.1.1-1.fc39.x86_64                                                                                     24/51 
  Installing       : qemu-user-static-2:8.1.1-1.fc39.x86_64                                                                                           25/51 
  Installing       : passt-0^20231004.gf851084-1.fc39.x86_64                                                                                          26/51 
  Installing       : libnet-1.3-1.fc39.x86_64                                                                                                         27/51 
  Installing       : conmon-2:2.1.8-2.fc39.x86_64                                                                                                     28/51 
  Installing       : aardvark-dns-1.8.0-1.fc39.x86_64                                                                                                 29/51 
  Installing       : netavark-1.8.0-2.fc39.x86_64                                                                                                     30/51 
  Installing       : yajl-2.1.0-22.fc39.x86_64                                                                                                        31/51 
  Installing       : libslirp-4.7.0-4.fc39.x86_64                                                                                                     32/51 
  Installing       : slirp4netns-1.2.2-1.fc39.x86_64                                                                                                  33/51 
  Installing       : libnftnl-1.2.6-2.fc39.x86_64                                                                                                     34/51 
  Installing       : libmd-1.1.0-2.fc39.x86_64                                                                                                        35/51 
  Installing       : libbsd-0.11.7-5.fc39.x86_64                                                                                                      36/51 
  Installing       : jansson-2.13.1-7.fc39.x86_64                                                                                                     37/51 
  Installing       : nftables-1:1.0.7-3.fc39.x86_64                                                                                                   38/51 
  Running scriptlet: nftables-1:1.0.7-3.fc39.x86_64                                                                                                   38/51 
  Installing       : criu-3.18-3.fc39.x86_64                                                                                                          39/51 
  Installing       : criu-libs-3.18-3.fc39.x86_64                                                                                                     40/51 
  Installing       : crun-1.11.1-1.fc39.x86_64                                                                                                        41/51 
  Installing       : iptables-legacy-libs-1.8.9-5.fc39.x86_64                                                                                         42/51 
  Installing       : iptables-legacy-1.8.9-5.fc39.x86_64                                                                                              43/51 
  Running scriptlet: iptables-legacy-1.8.9-5.fc39.x86_64                                                                                              43/51 
  Installing       : gpgme-1.20.0-5.fc39.x86_64                                                                                                       44/51 
  Installing       : fuse-common-3.16.1-1.fc39.x86_64                                                                                                 45/51 
  Installing       : fuse3-3.16.1-1.fc39.x86_64                                                                                                       46/51 
  Installing       : fuse-overlayfs-1.12-2.fc39.x86_64                                                                                                47/51 
  Running scriptlet: fuse-overlayfs-1.12-2.fc39.x86_64                                                                                                47/51 
  Installing       : containers-common-4:1-95.fc39.noarch                                                                                             48/51 
  Installing       : containers-common-extra-4:1-95.fc39.noarch                                                                                       49/51 
  Installing       : catatonit-0.1.7-18.fc39.x86_64                                                                                                   50/51 
  Installing       : podman-5:4.7.2-1.fc39.x86_64                                                                                                     51/51 
  Running scriptlet: podman-5:4.7.2-1.fc39.x86_64                                                                                                     51/51 
fchownat() of /sys/kernel/security/ima/binary_runtime_measurements failed: Permission denied

  Verifying        : catatonit-0.1.7-18.fc39.x86_64                                                                                                    1/51 
  Verifying        : containers-common-4:1-95.fc39.noarch                                                                                              2/51 
  Verifying        : containers-common-extra-4:1-95.fc39.noarch                                                                                        3/51 
  Verifying        : criu-3.18-3.fc39.x86_64                                                                                                           4/51 
  Verifying        : criu-libs-3.18-3.fc39.x86_64                                                                                                      5/51 
  Verifying        : fuse-common-3.16.1-1.fc39.x86_64                                                                                                  6/51 
  Verifying        : fuse-overlayfs-1.12-2.fc39.x86_64                                                                                                 7/51 
  Verifying        : fuse3-3.16.1-1.fc39.x86_64                                                                                                        8/51 
  Verifying        : fuse3-libs-3.16.1-1.fc39.x86_64                                                                                                   9/51 
  Verifying        : gpgme-1.20.0-5.fc39.x86_64                                                                                                       10/51 
  Verifying        : iptables-legacy-1.8.9-5.fc39.x86_64                                                                                              11/51 
  Verifying        : iptables-legacy-libs-1.8.9-5.fc39.x86_64                                                                                         12/51 
  Verifying        : jansson-2.13.1-7.fc39.x86_64                                                                                                     13/51 
  Verifying        : libbsd-0.11.7-5.fc39.x86_64                                                                                                      14/51 
  Verifying        : libmd-1.1.0-2.fc39.x86_64                                                                                                        15/51 
  Verifying        : libnftnl-1.2.6-2.fc39.x86_64                                                                                                     16/51 
  Verifying        : libslirp-4.7.0-4.fc39.x86_64                                                                                                     17/51 
  Verifying        : nftables-1:1.0.7-3.fc39.x86_64                                                                                                   18/51 
  Verifying        : protobuf-c-1.4.1-5.fc39.x86_64                                                                                                   19/51 
  Verifying        : yajl-2.1.0-22.fc39.x86_64                                                                                                        20/51 
  Verifying        : aardvark-dns-1.8.0-1.fc39.x86_64                                                                                                 21/51 
  Verifying        : conmon-2:2.1.8-2.fc39.x86_64                                                                                                     22/51 
  Verifying        : crun-1.11.1-1.fc39.x86_64                                                                                                        23/51 
  Verifying        : gvisor-tap-vsock-6:0.7.1-1.fc39.x86_64                                                                                           24/51 
  Verifying        : gvisor-tap-vsock-gvforwarder-6:0.7.1-1.fc39.x86_64                                                                               25/51 
  Verifying        : libnet-1.3-1.fc39.x86_64                                                                                                         26/51 
  Verifying        : netavark-1.8.0-2.fc39.x86_64                                                                                                     27/51 
  Verifying        : passt-0^20231004.gf851084-1.fc39.x86_64                                                                                          28/51 
  Verifying        : podman-5:4.7.2-1.fc39.x86_64                                                                                                     29/51 
  Verifying        : qemu-user-static-2:8.1.1-1.fc39.x86_64                                                                                           30/51 
  Verifying        : qemu-user-static-aarch64-2:8.1.1-1.fc39.x86_64                                                                                   31/51 
  Verifying        : qemu-user-static-alpha-2:8.1.1-1.fc39.x86_64                                                                                     32/51 
  Verifying        : qemu-user-static-arm-2:8.1.1-1.fc39.x86_64                                                                                       33/51 
  Verifying        : qemu-user-static-cris-2:8.1.1-1.fc39.x86_64                                                                                      34/51 
  Verifying        : qemu-user-static-hexagon-2:8.1.1-1.fc39.x86_64                                                                                   35/51 
  Verifying        : qemu-user-static-hppa-2:8.1.1-1.fc39.x86_64                                                                                      36/51 
  Verifying        : qemu-user-static-loongarch64-2:8.1.1-1.fc39.x86_64                                                                               37/51 
  Verifying        : qemu-user-static-m68k-2:8.1.1-1.fc39.x86_64                                                                                      38/51 
  Verifying        : qemu-user-static-microblaze-2:8.1.1-1.fc39.x86_64                                                                                39/51 
  Verifying        : qemu-user-static-mips-2:8.1.1-1.fc39.x86_64                                                                                      40/51 
  Verifying        : qemu-user-static-nios2-2:8.1.1-1.fc39.x86_64                                                                                     41/51 
  Verifying        : qemu-user-static-or1k-2:8.1.1-1.fc39.x86_64                                                                                      42/51 
  Verifying        : qemu-user-static-ppc-2:8.1.1-1.fc39.x86_64                                                                                       43/51 
  Verifying        : qemu-user-static-riscv-2:8.1.1-1.fc39.x86_64                                                                                     44/51 
  Verifying        : qemu-user-static-s390x-2:8.1.1-1.fc39.x86_64                                                                                     45/51 
  Verifying        : qemu-user-static-sh4-2:8.1.1-1.fc39.x86_64                                                                                       46/51 
  Verifying        : qemu-user-static-sparc-2:8.1.1-1.fc39.x86_64                                                                                     47/51 
  Verifying        : qemu-user-static-x86-2:8.1.1-1.fc39.x86_64                                                                                       48/51 
  Verifying        : qemu-user-static-xtensa-2:8.1.1-1.fc39.x86_64                                                                                    49/51 
  Verifying        : shadow-utils-subid-2:4.14.0-2.fc39.x86_64                                                                                        50/51 
  Verifying        : slirp4netns-1.2.2-1.fc39.x86_64                                                                                                  51/51 

Installed:
  aardvark-dns-1.8.0-1.fc39.x86_64                 catatonit-0.1.7-18.fc39.x86_64                      conmon-2:2.1.8-2.fc39.x86_64                        
  containers-common-4:1-95.fc39.noarch             containers-common-extra-4:1-95.fc39.noarch          criu-3.18-3.fc39.x86_64                             
  criu-libs-3.18-3.fc39.x86_64                     crun-1.11.1-1.fc39.x86_64                           fuse-common-3.16.1-1.fc39.x86_64                    
  fuse-overlayfs-1.12-2.fc39.x86_64                fuse3-3.16.1-1.fc39.x86_64                          fuse3-libs-3.16.1-1.fc39.x86_64                     
  gpgme-1.20.0-5.fc39.x86_64                       gvisor-tap-vsock-6:0.7.1-1.fc39.x86_64              gvisor-tap-vsock-gvforwarder-6:0.7.1-1.fc39.x86_64  
  iptables-legacy-1.8.9-5.fc39.x86_64              iptables-legacy-libs-1.8.9-5.fc39.x86_64            jansson-2.13.1-7.fc39.x86_64                        
  libbsd-0.11.7-5.fc39.x86_64                      libmd-1.1.0-2.fc39.x86_64                           libnet-1.3-1.fc39.x86_64                            
  libnftnl-1.2.6-2.fc39.x86_64                     libslirp-4.7.0-4.fc39.x86_64                        netavark-1.8.0-2.fc39.x86_64                        
  nftables-1:1.0.7-3.fc39.x86_64                   passt-0^20231004.gf851084-1.fc39.x86_64             podman-5:4.7.2-1.fc39.x86_64                        
  protobuf-c-1.4.1-5.fc39.x86_64                   qemu-user-static-2:8.1.1-1.fc39.x86_64              qemu-user-static-aarch64-2:8.1.1-1.fc39.x86_64      
  qemu-user-static-alpha-2:8.1.1-1.fc39.x86_64     qemu-user-static-arm-2:8.1.1-1.fc39.x86_64          qemu-user-static-cris-2:8.1.1-1.fc39.x86_64         
  qemu-user-static-hexagon-2:8.1.1-1.fc39.x86_64   qemu-user-static-hppa-2:8.1.1-1.fc39.x86_64         qemu-user-static-loongarch64-2:8.1.1-1.fc39.x86_64  
  qemu-user-static-m68k-2:8.1.1-1.fc39.x86_64      qemu-user-static-microblaze-2:8.1.1-1.fc39.x86_64   qemu-user-static-mips-2:8.1.1-1.fc39.x86_64         
  qemu-user-static-nios2-2:8.1.1-1.fc39.x86_64     qemu-user-static-or1k-2:8.1.1-1.fc39.x86_64         qemu-user-static-ppc-2:8.1.1-1.fc39.x86_64          
  qemu-user-static-riscv-2:8.1.1-1.fc39.x86_64     qemu-user-static-s390x-2:8.1.1-1.fc39.x86_64        qemu-user-static-sh4-2:8.1.1-1.fc39.x86_64          
  qemu-user-static-sparc-2:8.1.1-1.fc39.x86_64     qemu-user-static-x86-2:8.1.1-1.fc39.x86_64          qemu-user-static-xtensa-2:8.1.1-1.fc39.x86_64       
  shadow-utils-subid-2:4.14.0-2.fc39.x86_64        slirp4netns-1.2.2-1.fc39.x86_64                     yajl-2.1.0-22.fc39.x86_64                           

Complete!
[root@fedct2 ~]# podman run hello-world
Resolved "hello-world" as an alias (/etc/containers/registries.conf.d/000-shortnames.conf)
Trying to pull quay.io/podman/hello:latest...
Getting image source signatures
Copying blob d08b40be6878 done   | 
Copying config e2b3db5d4f done   | 
Writing manifest to image destination
Error: crun: cannot open sd-bus: No such file or directory: OCI runtime attempted to invoke a command that was not found
[root@fedct2 ~]#

The error makes it sound like there’s a missing dependency, maybe something dbus related as it mentions sd-dbus?

I ran into this error recently when I tried installing podman on radxa’s rockpis running dietpi. Even weird is that when I tried installing docker on orangepi5 running dietpi, I got podman installed ?!! There is something fishy going on with podman and docker-ce. I know it sounds weird. May be I got something mixed up. Dont know but I will try to revisit this thread once/if I get any clarity.

I knew I’d seen it in more than one guest OS so I tried it with a few different ones. Gentoo, Alpine, Debian, and Ubuntu work out of the box with security.nesting=true. Fedora and Archlinux don’t work, they both give the same Error: crun: cannot open sd-bus:... error.

I’m not an expert at debugging these things, but using strace shows that both Fedora and Arch are looking for statfs("/sys/fs/cgroup/unified", 0xc0004ffc98) = -1 ENOENT (No such file or directory). Of all the different ENOENT files, that’s the only one that shows up in the strace log from Fedora/Arch that is not attempted to be read on Debian.