APT is one of the applications that assume multiple effective UIDs exist, so that it can sandbox itself. When running with ignore_chown_errors option enabled (see podman(1)), this will lead to setgroups, seteuid and setguid syscalls to fail, breaking most of apt commands.
Ensure that a single UID is used inside the containers, both at base build image (without /etc/set{u,g}id settings) and IOC runtime, especially allowing one to properly use apt.
APT is one of the applications that assume multiple effective UIDs exist, so that it can sandbox itself. When running with
ignore_chown_errors
option enabled (see podman(1)), this will lead tosetgroups
,seteuid
andsetguid
syscalls to fail, breaking most ofapt
commands.Ensure that a single UID is used inside the containers, both at base build image (without
/etc/set{u,g}id
settings) and IOC runtime, especially allowing one to properly use apt.