Is it possible to run bootc-image-builder inside another container?

[Antios]

We’ve been exploring the use of bootc-image-builder to generate raw disk images, with the requirement that it be able to run inside another Podman container. From the initial testing we’ve done, this doesn’t seem to work (probably expected as there are generally issues with nested containers), as we encountered issues related to cgroup permissions, access to host storage, and other nested-container limitations.

We’re interested in understanding whether this is realistically supported today, what container permissions or host configuration changes are typically required, and whether there are recommended alternatives or best practices for running bootc-image-builder in containerized CI/CD pipelines.

thanks!

[supakeen]

Mmmm it seems it's hard to get good notifcations about discussions. We don't really test this so it's not supported right now; people have/do run (bootc-)image-builder in various pipelines. Perhaps @ondrejbudai has some references.