Podman fails with 'cannot clone: Operation not permitted' on this runner because it cannot create namespaces. The runner environment lacks the capabilities for namespace-based container isolation. Solution: Add --isolation=chroot flag to use chroot instead of namespaces. This works in restricted environments without CAP_SYS_ADMIN or user namespace support. Trade-off: Chroot isolation is slower but functional on unprivileged runners. Reviewed-on: graham/towerops-web#224 |
||
|---|---|---|
| .. | ||
| e2e-tests.yaml | ||
| pr-tests.yaml | ||
| production.yaml | ||
| renovate.yaml | ||
| staging.yaml | ||