towerops/.forgejo/workflows
Graham McIntire 26befb9f4f fix: use chroot isolation for Podman builds on unprivileged runner (#224)
Podman fails with 'cannot clone: Operation not permitted' on this runner
because it cannot create namespaces. The runner environment lacks the
capabilities for namespace-based container isolation.

Solution: Add --isolation=chroot flag to use chroot instead of namespaces.
This works in restricted environments without CAP_SYS_ADMIN or user
namespace support.

Trade-off: Chroot isolation is slower but functional on unprivileged
runners.

Reviewed-on: graham/towerops-web#224
2026-03-29 13:09:44 -05:00
..
e2e-tests.yaml refactor: convert 6 Gleam modules to idiomatic Elixir with TDD (#196) 2026-03-28 09:52:07 -05:00
pr-tests.yaml refactor: convert 6 Gleam modules to idiomatic Elixir with TDD (#196) 2026-03-28 09:52:07 -05:00
production.yaml fix: use chroot isolation for Podman builds on unprivileged runner (#224) 2026-03-29 13:09:44 -05:00
renovate.yaml chore(config): add Renovate and build workflows 2026-03-03 16:54:19 -06:00
staging.yaml prod docker change (#221) 2026-03-29 12:16:24 -05:00