From eb76ed4a9d914fc21f0a525468a209c148c13c67 Mon Sep 17 00:00:00 2001
From: Kris Lamoureux <kris@lamoureux.io>
Date: Mon, 7 Sep 2026 14:55:53 -0400
Subject: [PATCH] Remove inert NSS subid entry from podman role

---
 roles/podman/tasks/main.yml | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/roles/podman/tasks/main.yml b/roles/podman/tasks/main.yml
index 2715f24..30fb934 100644
--- a/roles/podman/tasks/main.yml
+++ b/roles/podman/tasks/main.yml
@@ -3,15 +3,6 @@
     name: ["podman", "docker-cli", "docker-compose"]
     state: present
 
-- name: Configure NSS subid lookups for rootless containers
-  ansible.builtin.lineinfile:
-    path: /etc/nsswitch.conf
-    line: "subid: files"
-    regexp: "^subid:"
-    owner: root
-    group: root
-    mode: "0644"
-
 - name: Allow rootless containers to use capabilities in their user namespace
   ansible.posix.seboolean:
     name: container_use_userns_all_caps