`shadow-utils` library contains the bug which prevents podman commands to run successfully when a user is added into a container by cri-o. You can check more details here [1]

Here is the PR which fix the issue [2]

This is a request to backport the changes [2]

[1] https://issues.redhat.com/browse/CRW-6559?focusedId=27834625&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-27834625
[2] https://github.com/shadow-maint/shadow/pull/1345