ci: rework build

.gitea/workflows/build.yaml

@@ -17,27 +17,12 @@ jobs:
       matrix:
         image: [asahi-cosmic]
         version: [43] #Build current stable,next stable/rawhide (if not branched)
-
-    container:
-      image: "quay.io/fedora-ostree-desktops/buildroot:43"
-      options: "--security-opt apparmor=unconfined --privileged --user 0:0 --device=/dev/kvm --device=/dev/fuse --volume /:/run/host:rw --arch arm64"
+        arch: [linux/arm64] #todo fix
 
     steps:
-      - name: Install dependencies
-        run: |
-          dnf install -y nodejs
-          dnf upgrade -y --enablerepo=updates-testing --refresh rpm-ostree
-
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Build Bootable Container image
-        run: |
-          ./builder.sh "${{ matrix.image }}" "${{ matrix.version }}"
-
-      - name: Prepare Docker config directory
-        run: mkdir -p /root/.docker
-
       - name: Login to Container Registry
         uses: redhat-actions/podman-login@v1
         if: (github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
@@ -45,39 +30,28 @@ jobs:
           registry: git.plabble.org
           username: ${{ secrets.REGISTRY_USERNAME }}
           password: ${{ secrets.REGISTRY_TOKEN }}
-          auth_file_path: /tmp/auth.json
-
-      - name: Push container image to container registry
-        id: push
+      - name: test
         run: |
-          # Determine buildid (same logic as upstream)
-          if [[ -f ".buildid" ]]; then
-              buildid="$(< .buildid)"
-          else
-              buildid="$(date '+%Y%m%d.0')"
-              echo "${buildid}" > .buildid
-          fi
+         unshare -U --cgroup true
 
-          version="${{ matrix.version }}"
-          image="${{ matrix.image }}"
 
-          # Path to the OCI archive produced by builder.sh
-          archive="images/${image}/manifest.ociarchive"
+      - name: Build
+        id: build
+        uses: job79/buildah-build@58fa3e218f800e67fc91a4d109bcaeddd6cf2101
+        with:
+          sudo: true
+          image: misthios/${{ matrix.image}}
+          tags: ${{ matrix.version }}
+          context: ./
+          containerfiles: ./Containerfile
+          platforms: ${{ matrix.arch }}
+          build-args : |
+            VERSION=${{ matrix.version }}
+            IMAGE=${{ matrix.image }}
+          extra-args: |
+            --cap-add=all
+            --device=/dev/fuse
+            --security-opt=label=disable
+            --isolation=chroot
+            --device=/dev/kvm
 
-          echo "Pushing ${archive} as ${image}:${version}.${buildid}"
-
-          # Push version.buildid
-          skopeo copy \
-            --authfile /tmp/auth.json \
-            --retry-times 3 \
-            --dest-compress-format zstd \
-            oci-archive:${archive} \
-            docker://git.plabble.org/misthios/${image}:${version}.${buildid}
-
-          # Push version
-          skopeo copy \
-            --authfile /tmp/auth.json \
-            --retry-times 3 \
-            --dest-compress-format zstd \
-            docker://git.plabble.org/misthios/${image}:${version}.${buildid} \
-            docker://git.plabble.org/misthios/${image}:${version}