github.com/containers/podman/v5@v5.1.0-rc1/docs/source/markdown/options/device.md (about)

     1  ####> This option file is used in:
     2  ####>   podman build, create, farm build, pod clone, pod create, run
     3  ####> If file is edited, make sure the changes
     4  ####> are applicable to all of those.
     5  #### **--device**=*host-device[:container-device][:permissions]*
     6  
     7  Add a host device to the <<container|pod>>. Optional *permissions* parameter
     8  can be used to specify device permissions by combining
     9  **r** for read, **w** for write, and **m** for **mknod**(2).
    10  
    11  Example: **--device=/dev/sdc:/dev/xvdc:rwm**.
    12  
    13  Note: if *host-device* is a symbolic link then it is resolved first.
    14  The <<container|pod>> only stores the major and minor numbers of the host device.
    15  
    16  Podman may load kernel modules required for using the specified
    17  device. The devices that Podman loads modules for when necessary are:
    18  /dev/fuse.
    19  
    20  In rootless mode, the new device is bind mounted in the container from the host
    21  rather than Podman creating it within the container space. Because the bind
    22  mount retains its SELinux label on SELinux systems, the container can get
    23  permission denied when accessing the mounted device. Modify SELinux settings to
    24  allow containers to use all device labels via the following command:
    25  
    26  $ sudo setsebool -P  container_use_devices=true