From 464ba4b24e4a8244222f08c72b1641c72121c64f Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Fri, 8 Sep 2023 07:28:03 -0400
Subject: [PATCH] ci: Run cosa unprivileged

As a workaround for a virtiofs bug:
https://gitlab.com/virtio-fs/virtiofsd/-/merge_requests/197

xref coreos/coreos-assembler#3428 (comment)
---
 .cci.jenkinsfile | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.cci.jenkinsfile b/.cci.jenkinsfile
index 305f12a5cc..cacab16c44 100644
--- a/.cci.jenkinsfile
+++ b/.cci.jenkinsfile
@@ -41,12 +41,12 @@ cosaPod(runAsUser: 0, memory: "${mem}Mi", cpu: "${nhosts}") {
   }
   stage("Build FCOS") {
     shwrap("""
-      coreos-assembler init --force https://github.com/coreos/fedora-coreos-config
+      chown -R -h builder: .
+      runuser -u builder -- coreos-assembler init --force https://github.com/coreos/fedora-coreos-config
       # include our built rpm-ostree in the image
-      mkdir -p overrides/rpm
       mv *.rpm overrides/rpm
-      coreos-assembler fetch
-      coreos-assembler build
+      runuser -u builder -- coreos-assembler fetch
+      runuser -u builder -- coreos-assembler build
        ${env.WORKSPACE}/ci/composepost-checks.sh
     """)
   }