diff --git a/oci-builder/Containerfile b/oci-builder/Containerfile index 6b520d0..7914966 100644 --- a/oci-builder/Containerfile +++ b/oci-builder/Containerfile @@ -13,9 +13,6 @@ RUN mkdir /.config && chown 65534:65534 /.config RUN mkdir /builder /builder/.config && chown -R 65534:65534 /builder -# This works around https://github.com/redhat-actions/podman-login/pull/43, until this PR is merged at least -RUN mkdir /builder/.docker && chown -R 65534:65534 /builder/.docker - RUN find / -mindepth 1 -path /proc -prune -or -path /sys -prune -or -path /dev -prune -or -type f -perm /6000 -exec sh -c "chmod ug-s '{}' && echo \"Removed setuid/setgid bit(s) from '{}'\"" \; RUN set -eo pipefail; getcap -r / | awk '{ print $1 }' | xargs -I '{}' sh -c "setcap -r '{}' && echo \"Removed file capability bit(s) from '{}'\""