ci: add --userns=host to nested Fedora build container

Forgejo runner on nullstone runs against a daemon with
userns-remap=default. addnab/docker-run-action launches the Fedora 43
build container with --privileged, which is incompatible with
userns-remap unless --userns=host is also set.
This commit is contained in:
obsidian-ai 2026-05-06 14:07:22 +01:00
parent d38fce4cb8
commit 7a0c665cf0

View file

@ -55,6 +55,7 @@ jobs:
image: registry.fedoraproject.org/fedora:43@sha256:72e874e771b953c6357c7a5823c6fc1e3e3253b90121e795febe01380e32269b image: registry.fedoraproject.org/fedora:43@sha256:72e874e771b953c6357c7a5823c6fc1e3e3253b90121e795febe01380e32269b
options: | options: |
--privileged --privileged
--userns=host
-v ${{ github.workspace }}:/work -v ${{ github.workspace }}:/work
-v /dev:/dev -v /dev:/dev
--tmpfs /tmp:rw,nosuid,nodev,exec,size=16G --tmpfs /tmp:rw,nosuid,nodev,exec,size=16G