mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-21 16:02:28 +00:00
aeee148723
Add podman + crun + uidmap + fuse-overlayfs + slirp4netns and a windmill user (uid 1000) with a subuid/subgid range to DockerfileFull and DockerfileFullEe, so the `container_runtime: podman` worker-group option works out of the box on the *-full images. Run the docker worker group as `user: "1000:1000"` for a rootless (unprivileged) daemon; root still works but is rootful. Base/slim images are untouched (kept lean). Verified on debian:bookworm-slim: packages resolve (podman 4.3.1), user + subuid set up, ~103MB layer delta (rounding error on the multi-GB full image). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>