OpenShift 4.10 I: Understand rootless Container

$ podman search ubi
NAME                                                DESCRIPTION
registry.access.redhat.com/ubi7                     The Universal Base Image is designed and engineered to be the base layer for 
registry.access.redhat.com/ubi7/ubi                 The Universal Base Image is designed and engineered to be the base layer 
registry.access.redhat.com/ubi8/ubi                 Provides the latest release of the Red Hat Universal Base Image 8
registry.access.redhat.com/ubi8                     The Universal Base Image is designed and engineered to be the base layer 
registry.access.redhat.com/ubi9/ubi                 rhcc_registry.access.redhat.com_ubi9/ubi
registry.access.redhat.com/ubi9                     rhcc_registry.access.redhat.com_ubi9

$ podman run --name as-user --rm --interactive --tty registry.access.redhat.com/ubi9/ubi:latest /bin/bash

[root@60e643438db3 /]# whoami 
root
[root@60e643438db3 /]# id
uid=0(root) gid=0(root) groups=0(root)
[root@60e643438db3 /]# sleep 1000

From another terminal window, run 

$ ps -aux | grep 'sleep 1000'
student    23933  0.0  0.0   5300  1368 pts/0    S+   12:18   0:00 /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 1000

$ sudo podman run --name as-root --rm --interactive --tty registry.access.redhat.com/ubi9/ubi:latest /bin/bash

[root@ff6d34b2a1e0 /]# whoami 
root
[root@ff6d34b2a1e0 /]# id
uid=0(root) gid=0(root) groups=0(root)
[root@ff6d34b2a1e0 /]# sleep 1000

From another terminal window, run 

$ ps -aux | grep 'sleep 1000'
root       24134  0.0  0.0   5300  1368 pts/0    S+   12:24   0:00 /usr/bin/coreutils --coreutils-prog-shebang=sleep /usr/bin/sleep 1000