blumeops/pulumi
Erich Blume 8ca8798121
All checks were successful
Test CI / test (push) Successful in 4s
Switch to Buildah for container builds (#51)
## Summary
- Replace Docker with Buildah for container image builds
- No Docker socket required - buildah is daemonless
- Cleaner security model (no privileged containers or socket mounting)
- Remove Docker-related security context from deployment

## Changes
- Update Dockerfile to install buildah/podman instead of docker-cli
- Configure buildah storage with overlay driver and fuse-overlayfs
- Update composite action to use `buildah bud` and `buildah push`
- Add `imagePullPolicy: Always` to ensure fresh image pulls
- Update test workflow to verify buildah/podman

## Testing
- [ ] Runner pod starts successfully
- [ ] Buildah is available in runner
- [ ] Test workflow verifies buildah/podman versions
- [ ] Container build workflow builds and pushes to zot

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/51
2026-01-24 13:30:26 -08:00
..
.gitignore Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00
__main__.py Remove unused indri tags and ansible roles (#41) 2026-01-21 20:18:53 -08:00
policy.hujson Switch to Buildah for container builds (#51) 2026-01-24 13:30:26 -08:00
Pulumi.tail8d86e.yaml Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00
Pulumi.yaml Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00
pyproject.toml Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00