Test podman

.github/workflows/common.yml

@@ -31,7 +31,8 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: ghcr.io/${{ github.repository }}
-      - uses: docker/build-push-action@v6
+      - id: docker_build
+        uses: docker/build-push-action@v6
         with:
           context: .
           pull: true
@@ -43,3 +44,6 @@ jobs:
             ghcr.io/${{ github.repository }}:master
             ${{ steps.docker_meta.outputs.tags }}
           cache-to: type=inline
+      - run: >-
+          docker run --rm  -v ./test.sh:/test.sh:ro --privileged --cgroupns=host
+          ${{ steps.docker_build.outputs.imageid }} /test.sh

test.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+set -ex
+
+mount --make-rshared /
+CGROUP="$(grep '^0::' /proc/self/cgroup)"
+chown -R github-actions:github-actions "/sys/fs/cgroup${CGROUP#0::}"
+
+sudo --preserve-env --set-home --user=github-actions -- podman run --rm alpine:latest true