On Fri, Jan 10, 2025 at 12:34 PM Patrick Steinhardt <ps@xxxxxx> wrote: > > The containerized jobs in GitHub Actions run as root, giving them > special permissions to for example delete files even when the user > shouldn't be able to due to file permissions. This limitation keeps us > from using containerized jobs for most of our Ubuntu-based jobs as it > causes a number of tests to fail. > > Adapt the jobs to create a separate user that executes the test suite. > This follows similar infrastructure that we already have in GitLab CI. Nit (not worth a reroll): It might help a bit to say something like: "This requires installing the 'sudo' and 'shadow-utils' (for `useradd`) packages."