Testing containers for first time: hello-world that should work?

tl;dr getting below permission denied with podman run hello-world; doing something silly? or nixos wiki maybe missing a step?

$ podman run docker.io/hello-world
Error: crun: sd-bus call: Operation not permitted: Permission denied: OCI permission denied

Any tips on what to poke at to fix this? I’m thinking I’ll live-boot from an ISO and see if I can make very simple reproduction steps (to isolate special “my setup” versus just following the wrong 101 guides).

context/debugging info:

  • why I’m running this silly hell-world: just trying to learn… I don’t have much experience with Docker or containers (other than avoiding Docker years ago when I saw it needed root and I still didn’t need it at work yet).
  • tried rebuilding with config from Podman - NixOS Wiki
  • I’m running these commands as a normal user (qsu), not root.
  • tried haphazardly restarting a bunch of stuff: sudo systemctl --daemon-reload && sudo systemctl restart podman && systemctl --user --daemon-reload && systemctl --user restart podman
  • haven’t tried a reboot yet

Sounds like [Rootless container] sd-bus call: Permission denied: OCI runtime permission denied error · Issue #6368 · containers/podman · GitHub