Merge branch 'IDX-2604-bazel-icos-tmpfs' into 'master'

improvement: [IDX-2604] tmpfs for podman's root

Changes that improve build performance of IC-OS images and even more, prevents occupying disk space for container images that are only used for building rootfs for IC-OS images. We have them cached on host machine under `/srv/cache/containers` (bind-mounted to `/var/lib/containers`). This cache is not valuable, bazel cache satisfies all concerns.

With this change `tmpfs` is created and mounted under `/tmp/tmpfs` and lives only during the lifetime of CI or `container-run.sh`'s container. Directory `/tmp/tmpfs/podman_root` is used for `podman`'s [root](https://docs.podman.io/en/latest/markdown/podman.1.html#root-value).

Using `tmpfs` for `/var/tmp/bazel-output` will be considered/added separately.

IDX-2604 

Closes IDX-2604

See merge request dfinity-lab/public/ic!13635

.devcontainer/devcontainer.json

@@ -1,5 +1,5 @@
 {
-  "image": "dfinity/ic-build:97c9c8be8665e272e9d7d9ae0312ee3f4860848d7a9c0421d68094f421f98cc7",
+  "image": "dfinity/ic-build:2640827df10ee10626121f53c7cb7c75b9014f5c2240c664579267bdba97a95b",
   "remoteUser": "ubuntu",
   "privileged": true,
   "runArgs": [

gitlab-ci/config/00--common.yml

@@ -149,7 +149,7 @@ after_script:
   artifacts:
     expire_in: 3 days
   image:
-    name: "registry.gitlab.com/dfinity-lab/core/docker/ic-build:97c9c8be8665e272e9d7d9ae0312ee3f4860848d7a9c0421d68094f421f98cc7"
+    name: "registry.gitlab.com/dfinity-lab/core/docker/ic-build:2640827df10ee10626121f53c7cb7c75b9014f5c2240c664579267bdba97a95b"
   tags:
     - dfinity-ic
   variables:
@@ -159,7 +159,7 @@ after_script:
   artifacts:
     expire_in: 3 days
   image:
-    name: "registry.gitlab.com/dfinity-lab/core/docker/ic-build-legacy:97c9c8be8665e272e9d7d9ae0312ee3f4860848d7a9c0421d68094f421f98cc7"
+    name: "registry.gitlab.com/dfinity-lab/core/docker/ic-build-legacy:2640827df10ee10626121f53c7cb7c75b9014f5c2240c664579267bdba97a95b"
   tags:
     - dfinity-ic
   variables:

gitlab-ci/container/TAG

@@ -1 +1 @@
-97c9c8be8665e272e9d7d9ae0312ee3f4860848d7a9c0421d68094f421f98cc7
+2640827df10ee10626121f53c7cb7c75b9014f5c2240c664579267bdba97a95b

gitlab-ci/container/files/docker.sh

@@ -5,5 +5,11 @@ set -e
 if [ -e /var/run/docker.sock ]; then
     docker-bin "$@"
 else
-    sudo podman "$@"
+    # set podman's root on tmpfs
+    mkdir -p /tmp/tmpfs
+    if ! mount | grep -q tmp-tmpfs; then
+        sudo mount -t tmpfs tmp-tmpfs /tmp/tmpfs
+    fi
+
+    sudo podman --root /tmp/tmpfs/podman_root "$@"
 fi