From 38946e8def8064b070ccf4f73445b2024b8a5ca9 Mon Sep 17 00:00:00 2001
From: panxiao81 <pan-xiao@live.cn>
Date: Wed, 16 Sep 2026 18:16:41 +0000
Subject: [PATCH] =?UTF-8?q?=E4=BD=BF=E7=94=A8=20vfs=20=E6=9E=84=E5=BB=BA?=
 =?UTF-8?q?=E5=B5=8C=E5=A5=97=E5=AE=B9=E5=99=A8=E9=95=9C=E5=83=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/publish-images.yml | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/publish-images.yml b/.gitea/workflows/publish-images.yml
index f3c6be8..70033c7 100644
--- a/.gitea/workflows/publish-images.yml
+++ b/.gitea/workflows/publish-images.yml
@@ -45,7 +45,12 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          dockerd >/tmp/dockerd.log 2>&1 &
+          # The runner Pod itself uses an overlay filesystem. A nested overlay
+          # snapshotter cannot mount there, so use the copy-based vfs driver.
+          dockerd \
+            --storage-driver=vfs \
+            --feature containerd-snapshotter=false \
+            >/tmp/dockerd.log 2>&1 &
           for _ in $(seq 1 60); do
             if docker info >/dev/null 2>&1; then
               exit 0
@@ -71,7 +76,6 @@ jobs:
           jwt_file=$(mktemp)
           cleanup() {
             rm -rf -- "$docker_config" "$jwt_file"
-            docker buildx rm ci-builder >/dev/null 2>&1 || true
           }
           trap cleanup EXIT
           export DOCKER_CONFIG="$docker_config"
@@ -84,14 +88,12 @@ jobs:
           jq -er '.[0].svids[0].svid' "$jwt_file" | \
             docker login "$PUSH_REGISTRY" --username zot --password-stdin
 
-          docker buildx create --name ci-builder --driver docker-container --use
-
           publish() {
             local repository=$1
             local dockerfile=$2
             local metadata=$3
             docker buildx build \
-              --builder ci-builder \
+              --builder default \
               --platform linux/amd64 \
               --file "$dockerfile" \
               --tag "${PUSH_REGISTRY}/${repository}:${image_tag}" \