Gemini CLI PR fixes rootless Podman sandbox by mapping host UID/GID
bl4987637-code · ghdev · 2026-09-25
A P1 PR in google-gemini/gemini-cli fixes sandbox startup under rootless Podman on Linux. Previously, rootless sessions failed because the sandbox tried to create or drop to a mapped user missing from /etc/passwd. The fix detects rootless Podman, defensively checks for useradd/groupadd, creates a container user matching the host UID/GID, and runs Gemini as that user instead of root — preserving file ownership on bind-mounted workspaces. Validation: GEMINISANDBOX=podman npm start, then check id and file ownership inside the sandbox.
More from coding & agent
- Perplexity CEO shows agent building browser-playable 3D zombie shooter in hours with zero 3D assets — AravSrinivas · 2026-11-11
- The complete harness engineering roadmap: how OpenAI shipped ~1M lines with zero hand-written code — blaizedsouza · 2026-11-11
- Micius-Flash: 27B Multimodal Model for Hardware and Semiconductor Agents — zhiman-ai · 2026-11-11
- Viral 'the harness is the machine' thread touts unverified Claude Fable/Mythos 5.2 9-equation architecture — blaizedsouza · 2026-11-11
- Compaction creates a new failure mode for coding agents: critical bug details can vanish mid-fix — blaizedsouza · 2026-11-11
- What 40+ coding-agent harnesses do between your prompt and the model, dissected — blaizedsouza · 2026-11-11