Who it is forA Linux user who runs containers without root and wants DSH to write to a project folder without changing its ownership.
The problemRunning the agent as root or recursively changing project ownership is a poor fit for a shared developer machine.
The outcomeThe DSH stack running rootless with UID mapping, a bind-mounted workspace, and a loopback port.
What you need first
- Docker with Compose, or Rootless Podman 4.5 with podman-compose 1.6.0 or newer
- A local project directory to mount as the workspace, or leave the default named volume
- Model provider credentials to enter in the Settings page or supply as environment variables
- A Kubernetes cluster and Helm for the chart deployment
Steps
- Run
podman versionandpodman-compose versionto confirm the tools are installed. - Run
podman info --format '{{.Host.Security.Rootless}}'and confirm the output is true. - Run
DSH_WORKSPACE=/absolute/path/to/your/project podman-compose -f compose.yaml -f compose.podman.yaml pull. (inferred, check the README) - Run
DSH_WORKSPACE=/absolute/path/to/your/project podman-compose -f compose.yaml -f compose.podman.yaml up -d --no-buildto start the stack. (inferred, check the README) - Open the Web UI through the loopback port and confirm files written in the workspace are owned by your user. (inferred, check the README)
Prompt for your agent
Using runzhliu/deepseek-harness-docker, verify Podman is rootless and start the stack with compose.yaml and compose.podman.yaml, using <project-path> as DSH_WORKSPACE. Expected output: running containers and a Rootless value of true. Verify that a file the agent creates in the workspace is owned by the invoking user on the host.
Caveat. The README says podman-compose 1.0.x cannot replace mounts correctly in this multi-file setup, so use version 1.6.0 or newer.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for runzhliu/deepseek-harness-docker and "Run DeepSeek Harness rootless with Podman Compose"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer