Ahh, I'm running priveleged containers, I wrote my own scripted framework for containers around lxc in mostly python.

Basically I fell head over heels in love with freebsd jails and wanted them on Linux, then started running x11 apps in them, it's my heroin.

Haven't used podman outside proper k8s for work, did proxmox for a bit, but it was just a webgui for the same thing.

There were a bunch of online bug reports about the /dev/dri issue, maybe there's a better solution now, but since this is my workstation I wasn't as worried about security.