Open
Description
- name: Build image as `root`
id: build-image
run: |
mkdir -p ./output
sudo podman pull ${{ env.IMAGE_NAME }}
sudo podman run \
--rm \
-it \
--privileged \
--pull=newer \
--security-opt label=type:unconfined_t \
-v ./config.toml:/config.toml:ro \
-v ./output:/output \
-v /var/lib/containers/storage:/var/lib/containers/storage \
${{ env.BIB_IMAGE }} \
--target-arch ${{ env.ARCH }} \
--type ${{ env.DISK_TYPE }} \
--rootfs ${{ env.ROOTFS }} \
--local \
${{ env.IMAGE_NAME }}
Note
Since the task runs as root
, actions on the ouput can lead to permission denied
. Perhaps after the task finished we should change the permission, or move it to a privileged output (which can be named more clearly than iso/disk.iso
or qcow2/disk.qcow2
.
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status