infra/ansible/roles/nomad_client/tasks/podman_prep.yml

---
- name: ensure podman group
  group:
    name: podman
    state: present
    system: True

- name: ensure podman user
  user:
    name: podman
    state: present
    group: podman
    system: True

- name: ensure podman is installed
  apt:
    name:
      - fuse-overlayfs
      - "podman={{ podman_version }}"
      - uidmap
    state: present

- name: enable podman
  systemd:
    name: podman
    state: started
    enabled: True
    daemon_reload: True
  changed_when: False
...