From 1b89e2a8f016b96f2e3b66df249f797648d364dc Mon Sep 17 00:00:00 2001
From: cqh963852 <cqh963852@hotmail.com>
Date: Thu, 8 Oct 2026 22:47:44 +0800
Subject: [PATCH] =?UTF-8?q?ci:=20buildah=20=E5=B5=8C=E5=A5=97=E5=AE=B9?=
 =?UTF-8?q?=E5=99=A8=E9=80=82=E9=85=8D=E2=80=94=E2=80=94BUILDAH=5FISOLATIO?=
 =?UTF-8?q?N=3Dchroot=20=E9=92=89=E6=AD=BB=E9=9A=94=E7=A6=BB(runc/crun=20?=
 =?UTF-8?q?=E8=BF=87=E4=B8=8D=E4=BA=86=E5=B5=8C=E5=A5=97=20cgroup);apk=20?=
 =?UTF-8?q?=E8=A1=A5=20netavark(=E5=AE=B9=E5=99=A8=E7=BD=91=E7=BB=9C?=
 =?UTF-8?q?=E5=8A=A9=E6=89=8B,=E4=B8=8D=E9=9A=8F=20buildah=20=E8=87=AA?=
 =?UTF-8?q?=E5=8A=A8=E8=A3=85)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/build-tutorial.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/build-tutorial.yml b/.gitea/workflows/build-tutorial.yml
index 14e6008..4638c99 100644
--- a/.gitea/workflows/build-tutorial.yml
+++ b/.gitea/workflows/build-tutorial.yml
@@ -13,6 +13,8 @@ on:
 env:
   YARN_NPM_REGISTRY_SERVER: https://registry.npmmirror.com
   API: https://gitea.idealjs.com/api/v1/repos/idealjs/stack
+  # runner 是套娃容器——buildah 的 OCI runtime(runc/crun)在内部过不了 cgroup 关,钉死 chroot 隔离
+  BUILDAH_ISOLATION: chroot
 
 jobs:
   build:
@@ -30,7 +32,8 @@ jobs:
           command -v buildah >/dev/null && exit 0
           # 服务器在阿里云——apk 走阿里镜像源（dl-cdn 直连极慢）
           sed -i 's#https://dl-cdn.alpinelinux.org#https://mirrors.aliyun.com#g' /etc/apk/repositories
-          apk add --no-cache buildah
+          # netavark: buildah 配容器网络的助手,alpine 不会随 buildah 自动装
+          apk add --no-cache buildah netavark
 
       - name: buildah 登录阿里云镜像仓（基座为私有 idealjs/node）
         env: