infrastructure/shared/ansible/roles/podman_runtime/README.md

Podman runtime

The podman_runtime role installs and verifies the shared container runtime on ghostnet-ki.

The initial scope is intentionally limited:

• install Podman from Debian 13 together with DNS and rootless-network helpers;
• require systemd and cgroup v2;
• create /etc/containers/systemd for future system Quadlets;
• keep the Podman API socket and automatic image-update timer disabled;
• verify Podman version, cgroup mode, the overlay storage driver and the executable Quadlet generator; and
• run the Quadlet generator in dry-run mode without defining a workload.

The role does not pull images or create Production and Testing containers. It also does not yet choose between rootful system Quadlets and separate rootless service accounts. That decision belongs to the environment design because it affects GPU access, filesystem ownership and deployment privileges.