From cd3f1d389b2e7e6d697f51577c2a3dc6693bb308 Mon Sep 17 00:00:00 2001
From: humocs-man <251756307+humocs-man@users.noreply.github.com>
Date: Sun, 17 May 2026 16:37:12 +0200
Subject: [PATCH] Refactor rechunking process to use Fedora boot container

Updated the build process to use a privileged Fedora boot container for rechunking.
---
 .github/workflows/build.yml | 22 ++++++++++++++--------
 1 file changed, 14 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ac1b6b3..e001278 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -91,20 +91,26 @@ jobs:
           labels: ${{ steps.metadata.outputs.labels }}
           oci: true
 
-      # Intelligentes Rechunking auf RPM-Paketbasis mit maximal 128 Layern
+      # Intelligentes Rechunking auf RPM-Paketbasis mit maximal 128 Layern via Container-Lauf
       - name: Apply native bootc rechunking
         id: rechunk
         run: |
           set -x
-          BASE_IMAGE="localhost/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }}"
           mkdir -p ./chunkah-out
 
-          rpm-ostree compose build-chunked-oci \
-            --bootc \
-            --format-version=2 \
-            --max-layers 128 \
-            --from=$BASE_IMAGE \
-            --output=oci-archive:./chunkah-out/image.ociarchive
+          # Wir starten einen privilegierten Fedora-Bootc-Container, reichen den Podman-Storage
+          # sowie unseren Workspace hinein und führen das Rechunking darin aus.
+          podman run --rm --privileged \
+            -v /var/lib/containers:/var/lib/containers:z \
+            -v .:/workspace:z \
+            -w /workspace \
+            quay.io/fedora/fedora-bootc:stable \
+            rpm-ostree compose build-chunked-oci \
+              --bootc \
+              --format-version=2 \
+              --max-layers 128 \
+              --from=localhost/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }} \
+              --output=oci-archive:./chunkah-out/image.ociarchive
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v3