name: Check Buildah Build (Safe)
on: [push, workflow_dispatch]

jobs:
  buildah-build:
    runs-on: macos-m1
    steps:
      - name: Install Dependencies
        run: |
          if [ -f /etc/alpine-release ]; then
            # Install buildah, fuse-overlayfs, and netavark (required for networking)
            apk add --no-cache nodejs git buildah fuse-overlayfs netavark
          fi

      - name: Checkout
        uses: actions/checkout@v4

      - name: Build with Buildah
        run: |
          echo "FROM alpine" > Dockerfile
          echo "RUN echo 'Buildah build successful'" >> Dockerfile
          
          # Buildah needs some storage configuration tweaks for running inside a container
          # We use the 'vfs' driver which is slow but works reliably inside containers without special privileges
          # We use '--isolation=chroot' to avoid cgroup permission issues inside the runner container
          buildah build --storage-driver=vfs --isolation=chroot -t test-image .