Gemini CLI PR fixes rootless Podman sandbox by mapping host UID/GID
bl4987637-code · ghdev · 2026-09-25
A P1 PR in google-gemini/gemini-cli fixes sandbox startup under rootless Podman on Linux. Previously, rootless sessions failed because the sandbox tried to create or drop to a mapped user missing from /etc/passwd. The fix detects rootless Podman, defensively checks for useradd/groupadd, creates a container user matching the host UID/GID, and runs Gemini as that user instead of root — preserving file ownership on bind-mounted workspaces. Validation: GEMINISANDBOX=podman npm start, then check id and file ownership inside the sandbox.
More from coding & agent
- Sentry CEO: RAG isn't dead — context fetching is core to any good agent — zeeg · 2026-09-26
- Adam Dorr: agents looping scripts is easy; solving real problems remains marginal — adam_dorr · 2026-09-26
- Grok agent in a Tesla fetched a work parking pass end-to-end, unprompted — Baconbrix · 2026-09-26
- In an AI-first world, your own understanding of the project is state to preserve — brandon_xyzw · 2026-09-26
- Railway launches free no-account VMs (59 min) and OpenCode cloud agents — jasonkneen · 2026-09-26
- 575 PRs later: how the Astra agent untangled a sync-SQLite bottleneck in OC — soumitrashukla9 · 2026-09-26