systemctl --user start podman.service
podman run -d --rm --name dynamodb -p 0.0.0.0:8000:8000 \
amazon/dynamodb-local -jar DynamoDBLocal.jar -sharedDb
# sam build; sudo chcon -R -t container_file_t .aws-sam
mkdir tmp; sudo chcon -R -t container_file_t tmp
# denied { read } for pid=7041 comm=bootstrap name=tmpmk0y_8tp dev="tmpfs" ino=47920
# scontext=system_u:system_r:container_t:s0:c1020,c1021
# tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir permissive=0
DOCKER_HOST="unix:///run/user/$(id -u)/podman/podman.sock" \
SAM_CLI_TELEMETRY=0 \
TMPDIR="$(pwd)/tmp" \
sam local start-api --debug --warm-containers EAGER