Failures to run in GitLab

[supakeen]

When trying to run bootc-image-builder in GitLab with the following pipeline:

stages:
  - build

build-image:
  image: quay.io/podman/stable
  stage: build
  script:
    - sudo podman pull quay.io/centos-bootc/centos-bootc:stream9
    - mkdir output
    - |
      sudo podman run --privileged --security-opt label=type:unconfined_t \
      -v $(pwd)/output:/output \
      -v /var/lib/containers/storage:/var/lib/containers/storage \
      quay.io/centos-bootc/bootc-image-builder:latest \
      --type qcow2 \
      quay.io/centos-bootc/centos-bootc:stream9

The build fails with:

2025/04/01 19:44:59 error: cannot build manifest: running quay.io/centos-bootc/centos-bootc:stream9 container failed: exit status 126
stderr:
time="2025-04-01T19:44:57Z" level=warning msg="Failed to add conmon to cgroupfs sandbox cgroup: creating cgroup path /libpod_parent/conmon: enabling controller cpuset: write /sys/fs/cgroup/libpod_parent/cgroup.subtree_control: no such file or directory"
Error: OCI runtime error: crun: controller `pids` is not available under /sys/fs/cgroup/libpod_parent/libpod-28f6f7a127594d8c5510126cfa618d80e029e2db9b1f5075c44e033c7f5f2a81/cgroup.controllers

Let's figure out if this is something we can do, something podman can do, or something we should document on how it can be made to work.