ci(bluebuild): --security-opt label=disable + seccomp=unconfined for files module
BlueBuild's files module fails with 'chmod: Operation not permitted' on its own bind-mounted /tmp/modules/files/files.sh when run under podman. Disable SELinux relabeling + seccomp filter on the bluebuild CLI container so its nested buildah can chmod inside layer mounts.
This commit is contained in:
parent
e6aa2d14a8
commit
a06f54dd79
1 changed files with 2 additions and 0 deletions
2
.github/workflows/build-bluebuild.yml
vendored
2
.github/workflows/build-bluebuild.yml
vendored
|
|
@ -178,6 +178,8 @@ jobs:
|
|||
|
||||
podman run --rm \
|
||||
--privileged \
|
||||
--security-opt label=disable \
|
||||
--security-opt seccomp=unconfined \
|
||||
--entrypoint /usr/bin/bluebuild \
|
||||
-v "$PWD:/work" \
|
||||
-v /var/lib/containers/storage:/var/lib/containers/storage \
|
||||
|
|
|
|||
Loading…
Reference in a new issue