# Setting up subuid and subgid ranges with rootless-podman-service

**URL:** <https://forum.systemcrafters.net/t/setting-up-subuid-and-subgid-ranges-with-rootless-podman-service/1755>\
**Category:** Guix\
**Created:** [August 11, 2025, 3:24pm UTC](https://forum.systemcrafters.net/t/setting-up-subuid-and-subgid-ranges-with-rootless-podman-service/1755 "2025-08-11T15:24:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![moonling](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@moonling](https://forum.systemcrafters.net/u/moonling)\
**Post date:** [August 11, 2025, 3:24pm UTC](https://forum.systemcrafters.net/t/setting-up-subuid-and-subgid-ranges-with-rootless-podman-service/1755/1 "2025-08-11T15:24:02Z")

</div>

I have followed the example setup in the latest Guix manual for the rootless-podman-service setup. I am getting this message when reconfiguring:

`making ‘/var/guix/profiles/system-22-link’ the current system…`  
`populating /etc from /gnu/store/pfwv8lddz58xdncvq5b4xiqxiljai062-etc…`  
`setting up privileged programs in ‘/run/privileged/bin’…`  
`#<&invalid-subid-range-error range: #< name: “jesse” start: 10000 count: 65535>>`

My setup looks like this:

`(services (append (list`  
` ;; ...`  
` ;; Services for podman ___________________________________________ `  
` (service dbus-root-service-type)`  
` (service elogind-service-type)`  
` (service iptables-service-type`  
` (iptables-configuration`  
` (ipv4-rules (plain-file “iptables.rules” %iptables-rules)`  
` )))`  
` (service rootless-podman-service-type`  
` (rootless-podman-configuration`  
` (subgids`  
` (list (subid-range (name “jesse”))))`  
` (subuids`  
` (list (subid-range (name “jesse”)))))))`  
` %base-services)))`

I’m actually trying to troubleshoot a weird situation where after doing a system reconfigure with this setup all of these services run (iptables, elogind, etc). However when I reboot, my current profile is pointing to an old one not the one that is reported to be getting activated during the system reconfigure. This is the only error message I see and was thinking maybe it is causing an issue.

Does this error message mean anything?

---

<div class="post-metadata">

**Author:** ![wegei8](https://avatars.discourse-cdn.com/v4/letter/w/53a042/32.png) [@wegei8](https://forum.systemcrafters.net/u/wegei8)\
**Post date:** [August 12, 2025, 6:01pm UTC](https://forum.systemcrafters.net/t/setting-up-subuid-and-subgid-ranges-with-rootless-podman-service/1755/2 "2025-08-12T18:01:54Z")

</div>

Did you also update your user config? I don’t see it in the config you provided. Your user needs to be in `cgroup` group, I think.

See: [Podman on guix (rootless-podman-service-type) - #6 by wegei8](https://forum.systemcrafters.net/t/podman-on-guix-rootless-podman-service-type/1496/6)

---

<div class="post-metadata">

**Author:** ![moonling](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@moonling](https://forum.systemcrafters.net/u/moonling)\
**Post date:** [August 14, 2025, 12:45am UTC](https://forum.systemcrafters.net/t/setting-up-subuid-and-subgid-ranges-with-rootless-podman-service/1755/3 "2025-08-14T00:45:27Z")

</div>

Yep I have that:

```auto
   (user-account
    (name "jesse")
    (comment "Administrator")
    (group "users")
    (supplementary-groups '("wheel"
                            "audio" "video"
                            "netdev" "cgroup" )))

```

---

<div class="post-metadata">

**Author:** ![moonling](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@moonling](https://forum.systemcrafters.net/u/moonling)\
**Post date:** [August 17, 2025, 3:04am UTC](https://forum.systemcrafters.net/t/setting-up-subuid-and-subgid-ranges-with-rootless-podman-service/1755/4 "2025-08-17T03:04:38Z")

</div>

I think I have this figured out over here: [Guix Generation Persistence - #9 by moonling](https://forum.systemcrafters.net/t/guix-generation-persistence/1759/9)