Hey, thanks for the answer! Late reply I know. I’m running all the containers separately right now and just gave up with the pods. I thought about separate pods briefly, but didn’t do it, because I don’t understands pod networking properly and read some conflicting info. Would you separate gluetun and qbittorrent on different pods? From what I remember I couldn’t get gluetun to properly take over the pod’s networking and didn’t want to risk any leaks despite binding qbittorrent.

Yes, rootless podman.

Just to see if I understood correctly: So your container is running as 999, and UserNS=keep-id:uid=999,gid=999 maps 999 (the user used inside the container) to the host (in my case 1000). So any files the container creates have their permission set to 1000 and can be read/modified by both the host user (1000) and the container. UserNS=keep-id:uid=999,gid=999 ONLY maps the UIDs and does not set the UID of the container.

I think I understand now, thanks for the example, that helped.