Run Isolated Steam inside a rootless podman container with NVIDIA

Tested and made to works on CachyOS-znver4 aarch with nvidia GPU for now

Features

  • Full GPU access using NVIDIA toolkit
  • Custom storage location for Podman if needed
  • Custom home
  • Flatpak like (might be better) isolation for audio,video and D-bus access.
  • Separate networking unlike Flatpak.
  • Near-native performance (need to test comprehensively further)

How to

Obviously need to have set up Podman and Nvidia-toolkit first.

  1. Clone repo
  2. Read scripts to understand what’s going on.
  3. Edit paths and configs as instructed.
  4. Install dependencies
  5. Make scripts executable.
  6. Experiment and use

Tested

  • CS2
  • Marvel Rivals

Improvements are always welcome

Hobby project: took a long time to piece together things. Documentation is lacking, but script are not that long and easier to understand.

When a Steam game is launched from the flatpak version of Steam is the game itself running within the boundaries of the flatpak’s permissions or does it launch the same as native steam? If it’s the latter then I’d say yeah, the podman setup here seems like a great way to isolate games from the rest of your system!

It says page not found when I click the github link, did you delete or change the repo name? Also, what container environment is Steam installed in, is it a CachyOS container or something else?

The project Distrobox could be of interest with this setup as it works with podman! I have used it before to try running containerized Steam and it worked great! However, in their security implications section they do state they prioritize integration with the host system over security, so this might be worse isolation than your setup, although I can’t imagine the gap is too big as getting decent gaming performance requires a good bit of host resource access.

Forgot to make repo public. my Bad

This is great. But I am not a steam user. I use proton without steam. And beside podman, run game in systemd-nspawn containers may be possible.