I've spent *hours* poking at podman behaviour when remapping UIDs (--userns=auto) and weirdness around file descriptors. Good news is it was fixed sometime between 4.9.3 and 5.4.2