forgejo-mcp

History

Christoph Görn 97ee636e49 fix: 🐛 filename mismatch in sha256sum + privileged SCC for buildah Two bugs surfaced during first real pipeline run: 1. Containerfile: goreleaser and syft downloaded to renamed files (goreleaser.tar.gz, syft.tar.gz) but sha256sum -c expected the original release filenames. Download now uses original names so sha256sum -c resolves them correctly. 2. build-image task: privileged: true required for buildah on this OpenShift cluster. The pipeline SA has been granted privileged SCC in op1st-pipelines namespace (scoped grant, standard CI pattern). Rootless alternatives (--isolation=chroot, --userns=host) both fail due to nested user namespace restrictions even with anyuid SCC. Closes forgejo-mcp-aps	2026-05-26 01:24:49 +02:00
..
release-tools	fix: 🐛 filename mismatch in sha256sum + privileged SCC for buildah	2026-05-26 01:24:49 +02:00

Christoph Görn 97ee636e49

fix: 🐛 filename mismatch in sha256sum + privileged SCC for buildah

Two bugs surfaced during first real pipeline run:

1. Containerfile: goreleaser and syft downloaded to renamed files
   (goreleaser.tar.gz, syft.tar.gz) but sha256sum -c expected the
   original release filenames. Download now uses original names so
   sha256sum -c resolves them correctly.

2. build-image task: privileged: true required for buildah on this
   OpenShift cluster. The pipeline SA has been granted privileged SCC
   in op1st-pipelines namespace (scoped grant, standard CI pattern).
   Rootless alternatives (--isolation=chroot, --userns=host) both
   fail due to nested user namespace restrictions even with anyuid SCC.

Closes forgejo-mcp-aps

2026-05-26 01:24:49 +02:00

release-tools

fix: 🐛 filename mismatch in sha256sum + privileged SCC for buildah

2026-05-26 01:24:49 +02:00