From 4d2b265511284f28e51d38c417ae573f1b20f2f6 Mon Sep 17 00:00:00 2001
From: humocs-man <251756307+humocs-man@users.noreply.github.com>
Date: Sun, 17 May 2026 17:31:31 +0200
Subject: [PATCH] Modify Skopeo command to use podman unshare

Wrap the Skopeo command in 'podman unshare' to resolve rootless permission issues on the GitHub runner.
---
 .github/workflows/build.yml | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3b74e52..2ee3461 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -107,15 +107,17 @@ jobs:
           export REGISTRY_AUTH_FILE=$HOME/.docker/config.json
           REGISTRY_PATH="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}"
 
-          # Kopiert das Image direkt aus dem lokalen Speicher des Runners hoch
-          # und wendet dabei die performante ZSTD-Kompression an.
-          for tag in ${{ steps.metadata.outputs.tags }}; do
-            skopeo copy \
-              --dest-compress-format=zstd \
-              --dest-compress-level=5 \
-              containers-storage:localhost/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }} \
-              docker://$REGISTRY_PATH:$tag
-          done
+          # Wir packen den gesamten Skopeo-Aufruf in "podman unshare", 
+          # um das rootless Rechteproblem auf dem GitHub-Runner zu lösen.
+          podman unshare bash -c "
+            for tag in ${{ steps.metadata.outputs.tags }}; do
+              skopeo copy \
+                --dest-compress-format=zstd \
+                --dest-compress-level=5 \
+                containers-storage:localhost/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }} \
+                docker://$REGISTRY_PATH:\$tag
+            done
+          "
 
           # Den echten, finalen Registry-Digest abfragen
           FINAL_REGISTRY_DIGEST=$(skopeo inspect docker://$REGISTRY_PATH:${{ env.DEFAULT_TAG }} --format '{{.Digest}}')