towerops/.forgejo/workflows
Graham McIntire 7606efc635 fix: use docker-container buildx driver to resolve mount permission errors (#191)
The production deployment was failing with "operation not permitted" errors
when BuildKit tried to perform bind mounts during Docker image builds.

Root cause:
- The workflow starts Docker with --storage-driver=vfs for unprivileged runners
- VFS storage driver doesn't support the advanced mount operations needed by BuildKit
- The Dockerfile uses --mount=type=cache for build performance
- Using buildx driver=docker tried to use the daemon's VFS storage directly

Solution:
- Switch to driver=docker-container which runs BuildKit in an isolated container
- This container has its own storage layer that properly supports BuildKit features
- BuildKit container uses overlay2 internally regardless of host storage driver

This is the recommended approach for CI/CD environments with storage limitations.

Reviewed-on: graham/towerops-web#191
2026-03-27 13:44:22 -05:00
..
e2e-tests.yaml e2e-workflow-separate (#67) 2026-03-17 16:30:45 -05:00
pr-tests.yaml Rewrite protobuf encoding/decoding in pure Gleam with integrated validation (#104) 2026-03-21 16:08:40 -05:00
production.yaml fix: use docker-container buildx driver to resolve mount permission errors (#191) 2026-03-27 13:44:22 -05:00
renovate.yaml chore(config): add Renovate and build workflows 2026-03-03 16:54:19 -06:00
staging.yaml fix: code quality improvements and test reliability (#139) 2026-03-24 09:12:59 -05:00