Move buildah TMPDIR off the container overlayfs #17

Merged
felix merged 4 commits from worktree-buildah-tmpdir into main 2026-10-22 23:07:14 +00:00
Member

buildah 1.45 (via the ci image digest bump in #16) overlay-mounts the build context with its upperdir under /var/tmp, which is on the container's overlayfs root and fails with EINVAL. Point TMPDIR at the workspace volume in all build steps.

🤖 Generated with Claude Code

buildah 1.45 (via the ci image digest bump in #16) overlay-mounts the build context with its upperdir under /var/tmp, which is on the container's overlayfs root and fails with EINVAL. Point TMPDIR at the workspace volume in all build steps. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Move buildah TMPDIR off the container overlayfs
Some checks failed
ci/woodpecker/push/ci Pipeline failed
ci/woodpecker/push/cnpg-postgresql-immich Pipeline failed
ci/woodpecker/push/alpine Pipeline failed
ci/woodpecker/pr/ci Pipeline failed
ci/woodpecker/pr/alpine Pipeline failed
ci/woodpecker/pr/cnpg-postgresql-immich Pipeline failed
ci/woodpecker/pr/pixelfed Pipeline failed
ci/woodpecker/push/pixelfed Pipeline failed
e2d9e7eda4
buildah 1.45 (pulled in by the ci image digest bump in #16) overlay-mounts
the build context with its upperdir under /var/tmp, which sits on the
container's overlayfs root and fails with EINVAL. Use the workspace
volume instead.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Build with host networking
Some checks failed
ci/woodpecker/push/alpine Pipeline was successful
ci/woodpecker/push/cnpg-postgresql-immich Pipeline was successful
ci/woodpecker/pr/alpine Pipeline was successful
ci/woodpecker/push/pixelfed Pipeline was canceled
ci/woodpecker/push/ci Pipeline was canceled
ci/woodpecker/pr/ci Pipeline was canceled
ci/woodpecker/pr/cnpg-postgresql-immich Pipeline was canceled
ci/woodpecker/pr/pixelfed Pipeline was canceled
fa6127517a
netavark 2.x in the new ci image defaults to the nftables driver, but nft
isn't installed, so every RUN step fails to set up networking.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Install nftables for netavark
Some checks failed
ci/woodpecker/push/alpine Pipeline was successful
ci/woodpecker/pr/pixelfed Pipeline is pending
ci/woodpecker/push/pixelfed Pipeline was canceled
ci/woodpecker/push/ci Pipeline was canceled
ci/woodpecker/push/cnpg-postgresql-immich Pipeline was canceled
ci/woodpecker/pr/alpine Pipeline was canceled
ci/woodpecker/pr/cnpg-postgresql-immich Pipeline was canceled
ci/woodpecker/pr/ci Pipeline was canceled
d4332acf45
netavark 2.x in the new ci image defaults to the nftables driver, but nft
isn't installed, so every RUN step fails to set up networking. Add it to
the ci image, and install it at runtime until the ci digest is bumped.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Revert "Build with host networking"
Some checks failed
ci/woodpecker/pr/alpine Pipeline was successful
ci/woodpecker/pr/cnpg-postgresql-immich Pipeline was successful
ci/woodpecker/pr/pixelfed Pipeline was successful
ci/woodpecker/pr/ci Pipeline was successful
ci/woodpecker/push/ci Pipeline was canceled
ci/woodpecker/push/pixelfed Pipeline is pending
ci/woodpecker/push/cnpg-postgresql-immich Pipeline was canceled
ci/woodpecker/push/alpine Pipeline was canceled
e27d7fcfc3
nftables is installed now, so netavark works without host networking.

This reverts commit fa61275.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
felix merged commit e27d7fcfc3 into main 2026-10-22 23:07:14 +00:00
felix deleted branch worktree-buildah-tmpdir 2026-10-22 23:07:15 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
krautit/containers!17
No description provided.