🟡 Medium   ⏱ 5–30 min  Last verified: 20 May 2026
Affected versions: SUSE Linux Enterprise Server 15

📖 ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution – Primary Fix
  7. Solution – Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

Non-root users get `lstat /etc/subuid: no such file or directory` running rootless containers.

Environment & Reproduction

Observed on SLES 15 hosts after enabling rootless podman without proper user mappings.

Root Cause Analysis

`/etc/subuid` and `/etc/subgid` are missing entries for the user, so `newuidmap` fails.

Quick Triage

Run `id` and `cat /etc/subuid` to confirm mappings exist for the user.

Step-by-Step Diagnosis

Inspect `/etc/subuid`, `/etc/subgid`, and `~/.config/containers/storage.conf`.

Illustrative mockup for sles-15 — podman_rootless-subuid_terminal
Terminal diagnostics for Rootless podman fails with subuid mapping errors — Illustrative mockup — Progressive Robot

Solution – Primary Fix

Add the user with `usermod –add-subuids 100000-165535 –add-subgids 100000-165535 `.

Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Illustrative mockup for sles-15 — podman_rootless-subuid_logs
Logs and evidence for Rootless podman fails with subuid mapping errors — Illustrative mockup — Progressive Robot

Solution – Alternative Approaches

Use `usermod` automation or AutoYaST to provision subuid ranges on every host.

Verification & Acceptance Criteria

Rootless containers start, `podman info` reports rootless graph driver, and tests pass.

Rollback Plan

Remove subuid mappings if the user role no longer requires container access.

Prevention & Hardening

Document subuid ranges and avoid range collisions across users.

Pairs with `cannot setup namespace using newuidmap` errors.

Related tutorial: View the step-by-step tutorial for sles-15.

View all sles-15 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

SUSE container security and rootless podman documentation.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.