Allow the Rootless User to Restart the Podman Service



Overview of the Issue

This issue occurs in the following circumstances:

  1. An organization provisions a Linux VM for the vFunction Server. This Linux VM may use Ubuntu or some other Operating System
  2. As a rootless user, the organization attempts to start the Podman Service
  3. The attempt fails with the following administrative prompt:
==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===
Authentication is required to manage system services or units.
Authenticating as: A_SEPARATE_USER_BESIDES_THE_ROOTLESS_USER
Password: 

Solution

Take the following steps to resolve this issue as the Root User or a user with Sudo access:

  1. vi /usr/share/polkit-1/actions/org.freedesktop.systemd1.policy
  2. Find the section labelled <action id="org.freedesktop.systemd1.manage-unit-files">
  3. Below this section, find the tag <allow_any>AUTH_ADMIN</allow_any>
  4. Change this section to read <allow_any>yes</allow_any>
  5. Save and close this file
  6. Switch users to the Rootless User who will be performing the vFunction Server Installation
  7. Confirm that the Podman Service can be started without an administrative prompt