From adb8b4293871d83359fad3f36e10c7fd24af3e26 Mon Sep 17 00:00:00 2001
From: Michal <michal@itaz.eu>
Date: Mon, 9 Mar 2026 09:58:57 +0000
Subject: [PATCH] ci: switch docker job from docker CLI to podman

Docker CLI can't connect to the podman socket in the runner container
(permission denied even as root). Switch to podman for building images
locally and skopeo with containers-storage transport for pushing.
Podman builds don't need a daemon socket.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitea/workflows/ci.yml | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 3b84f13..4401b08 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -147,43 +147,42 @@ jobs:
     env:
       REGISTRY: ${{ env.GITEA_REGISTRY }}
       OWNER: ${{ env.GITEA_OWNER }}
-      DOCKER_API_VERSION: "1.43"
     steps:
       - uses: actions/checkout@v4
 
-      - name: Install docker CLI and skopeo
-        run: sudo apt-get update && sudo apt-get install -y docker.io skopeo
+      - name: Install podman and skopeo
+        run: sudo apt-get update && sudo apt-get install -y podman skopeo
 
       - name: Build & push mcpd
         run: |
-          sudo -E docker build -t mcpd:latest -f deploy/Dockerfile.mcpd .
+          sudo -E podman build -t mcpd:latest -f deploy/Dockerfile.mcpd .
           sudo -E skopeo copy --dest-tls-verify=false \
             --dest-creds "${{ env.OWNER }}:${{ secrets.PACKAGES_TOKEN }}" \
-            docker-daemon:mcpd:latest \
+            containers-storage:mcpd:latest \
             docker://${{ env.REGISTRY }}/${{ env.OWNER }}/mcpd:latest
 
       - name: Build & push node-runner
         run: |
-          sudo -E docker build -t node-runner:latest -f deploy/Dockerfile.node-runner .
+          sudo -E podman build -t node-runner:latest -f deploy/Dockerfile.node-runner .
           sudo -E skopeo copy --dest-tls-verify=false \
             --dest-creds "${{ env.OWNER }}:${{ secrets.PACKAGES_TOKEN }}" \
-            docker-daemon:node-runner:latest \
+            containers-storage:node-runner:latest \
             docker://${{ env.REGISTRY }}/${{ env.OWNER }}/mcpctl-node-runner:latest
 
       - name: Build & push python-runner
         run: |
-          sudo -E docker build -t python-runner:latest -f deploy/Dockerfile.python-runner .
+          sudo -E podman build -t python-runner:latest -f deploy/Dockerfile.python-runner .
           sudo -E skopeo copy --dest-tls-verify=false \
             --dest-creds "${{ env.OWNER }}:${{ secrets.PACKAGES_TOKEN }}" \
-            docker-daemon:python-runner:latest \
+            containers-storage:python-runner:latest \
             docker://${{ env.REGISTRY }}/${{ env.OWNER }}/mcpctl-python-runner:latest
 
       - name: Build & push docmost-mcp
         run: |
-          sudo -E docker build -t docmost-mcp:latest -f deploy/Dockerfile.docmost-mcp .
+          sudo -E podman build -t docmost-mcp:latest -f deploy/Dockerfile.docmost-mcp .
           sudo -E skopeo copy --dest-tls-verify=false \
             --dest-creds "${{ env.OWNER }}:${{ secrets.PACKAGES_TOKEN }}" \
-            docker-daemon:docmost-mcp:latest \
+            containers-storage:docmost-mcp:latest \
             docker://${{ env.REGISTRY }}/${{ env.OWNER }}/docmost-mcp:latest
 
       - name: Link packages to repository