[BUG] Quick-start Podman command fails on Fedora with "dubious ownership" git error — needs --userns=keep-id

[praveenkumar]

Bug Description

The quick-start podman run command from the README fails on Fedora (rootless Podman) with a git "dubious ownership" error. The container runs as a different UID than the bind-mounted repo owner, causing git to refuse operations.

To Reproduce

1. On Fedora (tested on Fedora 43, kernel 7.0.11), run the documented command against a local repo:

  podman run --rm -i \
    -v /home/user/myrepo:/repo:ro,z \
    -v ~/agentready-reports:/reports:z \
    ghcr.io/ambient-code/agentready:latest \
    assess /repo --output-dir /reports

2. Confirm the large-repo warning if prompted.

Expected Behavior

Assessment runs and produces a report.

Actual Behavior

  Error during assessment: SHA is empty, possible dubious ownership in the repository at /repo.
              If this is unintended run:

                        "git config --global --add safe.directory /repo"

Environment

• OS: Fedora 43 (kernel 7.0.11-100.fc43.x86_64)
• Container runtime: Podman (rootless)
• Image: ghcr.io/ambient-code/agentready:latest
• SELinux: Enforcing (:z volume labels used)

Workaround

• Update the README quick-start to include --userns=keep-id --user $(id -u):$(id -g) in the Podman commands.

[praveenkumar]

Looks like it is part of https://github.com/ambient-code/agentready/blob/main/CONTAINER.md#podman-rootless-mode one. I am going to put a PR just to have link to this one in README.