fix: run CI container as root (GH default) to fix bun tempdir

GH Actions overrides Dockerfile USER and HOME, creating permission
conflicts no matter what we set. Running as root (the GH default for
container jobs) gives bun full /tmp access. Claude CLI already uses
--dangerously-skip-permissions in the session runner.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Garry Tan
2026-03-23 17:52:27 -07:00
parent a872154fd9
commit 470ac394d5
+3 -2
View File
@@ -61,5 +61,6 @@ RUN useradd -m -s /bin/bash runner \
&& chmod 1777 /tmp \
&& mkdir -p /home/runner/.bun && chown -R runner:runner /home/runner/.bun
# Switch to runner user — bun needs HOME-writable for temp files
USER runner
# NOTE: Do NOT use USER runner hereGH Actions overrides USER and HOME
# anyway, creating permission conflicts. Instead, we run as root (GH default)
# and use gosu/su-exec for claude commands that refuse root.