graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix docker on unprivileged ci: use vfs storage driver (#61)

Browse source 
overlayfs requires mount/unmount capabilities not available on the
unprivileged ci runner. Switch to vfs storage driver and use buildx
docker driver (not docker-container) to avoid nested mount issues.

Reviewed-on: graham/towerops-web#61
This commit is contained in:
Graham McIntire 2026-03-17 13:34:53 -05:00 • committed by graham
parent cd19db0680
commit f4e75689d4
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
.forgejo/workflows/production.yaml
View file

@ -233,7 +233,11 @@ jobs:
# features that require root/netadmin caps not available on unprivileged # features that require root/netadmin caps not available on unprivileged
# CI runners. Only image builds and registry pushes are needed here. # CI runners. Only image builds and registry pushes are needed here.
if ! docker info > /dev/null 2>&1; then if ! docker info > /dev/null 2>&1; then
sudo dockerd --iptables=false --ip6tables=false --bridge=none & sudo dockerd \
--iptables=false \
--ip6tables=false \
--bridge=none \
--storage-driver=vfs &
# Wait for Docker to be ready # Wait for Docker to be ready
timeout 30 bash -c 'until docker info > /dev/null 2>&1; do sleep 1; done' timeout 30 bash -c 'until docker info > /dev/null 2>&1; do sleep 1; done'
fi fi
@ -241,9 +245,8 @@ jobs:
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: https://github.com/docker/setup-buildx-action@v3 uses: https://github.com/docker/setup-buildx-action@v3
with: with:
driver: docker-container driver: docker
install: true install: true
buildkitd-flags: --allow-insecure-entitlement security.insecure
cleanup: true cleanup: true
- name: Log in to Container Registry - name: Log in to Container Registry