Rootless Podman Port Publishing Defaults and Interface Binding Behavior
Context When running containers in rootless mode, Podman uses slirp4netns to provide a user-mode network stack. The -p or --publish flag maps host ports to container ports, but the default binding address when no explicit IP is specified is 0.0.0.0, which listens on all available network interfaces. This behavior can unintentionally expose services to extern