I am fine if we add a better error message, but I am not sure we should try to automatically load the kernel module.  Would it be an acceptable solution?

Parker can you take a run at this one please?

Lets keep Parker concentrating on Short Names.

Giuseppe can you take care of this?

PR here: https://github.com/containers/podman/pull/7456

Is there a way we can trigger this automatically in Podman.  Currently the kernel loads some kernel modules automatically on first use of a device.  SELinux is blocking this for the container.

I wonder if podman just opened and closed the /dev/fuse device, if it would trigger the load and this would work in rootless and rootfull mode.  It also would be less invasive then this change.

I believe the issue here is that the confined container is the first on on the system to use /dev/fuse, so container_t process triggers a kernel module load, which is blocked.

If podman triggers the load then everything is happy.

The patch https://github.com/containers/podman/pull/7456/files works for me.

[root@hp-dl360g9-03 libpod]# git rev-parse HEAD
b4a10538e1a094f407b581572f8cb3e55656d470

[root@hp-dl360g9-03 libpod]# lsmod|grep fuse
fuse                  131072  0
[root@hp-dl360g9-03 libpod]# modprobe -r fuse
[root@hp-dl360g9-03 libpod]# lsmod|grep fuse
[root@hp-dl360g9-03 libpod]# ./bin/podman run --rm --device /dev/fuse -it registry-proxy.engineering.redhat.com/rh-osbs/rhel8-buildah:8.3-13 /bin/bash
Trying to pull registry-proxy.engineering.redhat.com/rh-osbs/rhel8-buildah:8.3-13...
Getting image source signatures
Copying blob 9598d2bbd6ed done
Copying blob ccd0627b3ce2 done
Copying blob d02623442d02 done
Copying config f6b40a46c0 done
Writing manifest to image destination
Storing signatures
[root@c1962238e275 /]# rpm -q buildah fuse-overlayfs
buildah-1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64
fuse-overlayfs-1.1.2-3.module+el8.3.0+8221+97165c3f.x86_64
[root@c1962238e275 /]# buildah info
{
    "host": {
        "CgroupVersion": "v1",
        "Distribution": {
            "distribution": "\"rhel\"",
            "version": "8.3"
        },
        "MemTotal": 16513163264,
        "MenFree": 1162301440,
        "OCIRuntime": "runc",
        "SwapFree": 8382836736,
        "SwapTotal": 8409575424,
        "arch": "amd64",
        "cpus": 12,
        "hostname": "c1962238e275",
        "kernel": "4.18.0-190.el8.x86_64",
        "os": "linux",
        "rootless": true,
        "uptime": "3246h 30m 44.68s (Approximately 135.25 days)"
    },
    "store": {
        "ContainerStore": {
            "number": 0
        },
        "GraphDriverName": "overlay",
        "GraphOptions": [
            "overlay.imagestore=/var/lib/shared",
            "overlay.mount_program=/usr/bin/fuse-overlayfs",
            "overlay.mountopt=nodev,metacopy=on"
        ],
        "GraphRoot": "/var/lib/containers/storage",
        "GraphStatus": {
            "Backing Filesystem": "overlayfs",
            "Native Overlay Diff": "false",
            "Supports d_type": "true",
            "Using metacopy": "false"
        },
        "ImageStore": {
            "number": 0
        },
        "RunRoot": "/var/run/containers/storage"
    }
}
[root@c1962238e275 /]# buildah --storage-opt=overlay.mount_program=/usr/bin/fuse-overlayfs from registry.access.redhat.com/ubi8
Getting image source signatures
Copying blob c4d668e229cd done
Copying blob ec1681b6a383 done
Copying config ecbc6f53bb done
Writing manifest to image destination
Storing signatures
ubi8-working-container
[root@c1962238e275 /]# buildah ps
CONTAINER ID  BUILDER  IMAGE ID     IMAGE NAME                       CONTAINER NAME
88ff17a5c051     *     ecbc6f53bba0 registry.access.redhat.com/ub... ubi8-working-container
[root@c1962238e275 /]# buildah --storage-opt=overlay.mount_program=/usr/bin/fuse-overlayfs run --isolation=chroot ubi8-working-container ls /
bin  boot  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var
[root@c1962238e275 /]# exit
exit
[root@hp-dl360g9-03 libpod]# lsmod|grep fuse
fuse                  131072  0