From 8df827ed27681548e27541395b687e301abc9f4d Mon Sep 17 00:00:00 2001
From: Echo Nar <97153783+lethedata@users.noreply.github.com>
Date: Fri, 28 Aug 2026 07:25:50 -0500
Subject: [PATCH] fix quadlet example socket access (#4260)

---
 examples/podman-quadlets/README.md           | 2 ++
 examples/podman-quadlets/mc-router.container | 1 +
 2 files changed, 3 insertions(+)

diff --git a/examples/podman-quadlets/README.md b/examples/podman-quadlets/README.md
index c8e013a4..bdcaa79f 100644
--- a/examples/podman-quadlets/README.md
+++ b/examples/podman-quadlets/README.md
@@ -37,6 +37,8 @@ ln -s ${XDG_CONFIG_HOME}/containers/systemd/mc@.service ${XDG_CONFIG_HOME}/conta
 
 If running rootless, be sure to enable lingering with `sudo loginctl enable-linger $USER`.
 
+`GroupAdd=0` when rootless the equivalent of the user's group id, not the hosts root.
+
 Also note that source IPs are currently lost due to how rootless podman handles custom networks.
 This should be fixed in a future podman release.[^3]
 
diff --git a/examples/podman-quadlets/mc-router.container b/examples/podman-quadlets/mc-router.container
index f7096b40..c68f8849 100644
--- a/examples/podman-quadlets/mc-router.container
+++ b/examples/podman-quadlets/mc-router.container
@@ -6,6 +6,7 @@ Image=docker.io/itzg/mc-router
 ContainerName=%N
 AutoUpdate=registry
 UserNS=host
+GroupAdd=0
 Volume=%t/podman/podman.sock:/var/run/docker.sock:ro
 Network=minecraft.network
 PublishPort=25565:25565