From 70ee239f90485a275cf70914300c33c79a5dc525 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alexander=20W=C3=BCrstlein?= <arw@arw.name>
Date: Sat, 19 Apr 2025 17:52:37 +0200
Subject: [PATCH] Add optional commented config lines to enable rootless podman

Rootless podman containers need the original 'kvm' (or similar) group attached to their processes to be access /dev/kvm. Uncommenting those added lines along with the described changes accomplishes this.
---
 compose.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/compose.yaml b/compose.yaml
index 81b4b81..fbd3f72 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -41,3 +41,5 @@ services:
       - /dev/net/tun # Enable tuntap
       #- /dev/sdX:/disk1 # Uncomment to mount a disk directly within the Windows VM (Note: 'disk1' will be mounted as the main drive. THIS DISK WILL BE FORMATTED BY DOCKER).
       #- /dev/sdY:/disk2 # Uncomment to mount a disk directly within the Windows VM (Note: 'disk2' and higher will be mounted as secondary drives. THIS DISK WILL NOT BE FORMATTED).
+    #group_add:      # uncomment this line and the next one for using rootless podman containers
+    #  - keep-groups # to make /dev/kvm work with podman. needs "crun" installed, "runc" will not work! Add your user to the 'kvm' group or another that can access /dev/kvm.