fix: run CI container as root (GH default) to fix bun tempdir

GH Actions overrides Dockerfile USER and HOME, creating permission
conflicts no matter what we set. Running as root (the GH default for
container jobs) gives bun full /tmp access. Claude CLI already uses
--dangerously-skip-permissions in the session runner.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Garry Tan 2026-03-23 17:52:27 -07:00
parent a872154fd9
commit 470ac394d5
No known key found for this signature in database
GPG Key ID: C1F69E85C74EFE1D
1 changed files with 3 additions and 2 deletions

View File

@ -61,5 +61,6 @@ RUN useradd -m -s /bin/bash runner \
&& chmod 1777 /tmp \
&& mkdir -p /home/runner/.bun && chown -R runner:runner /home/runner/.bun
# Switch to runner user — bun needs HOME-writable for temp files
USER runner
# NOTE: Do NOT use USER runner here — GH Actions overrides USER and HOME
# anyway, creating permission conflicts. Instead, we run as root (GH default)
# and use gosu/su-exec for claude commands that refuse root.