use rootless podman

.build.yml

@@ -11,30 +11,38 @@ sources:
 
 packages:
   - podman
+  - iptables
   - runit
   - go-task
+  - qemu-openrc
+  - qemu-modules
+  - qemu-aarch64
 
 tasks:
-  # cgroups need to be running in order to run podman
   - prep: |
+
+      # cgroups need to be running in order to run podman
       sudo rc-service cgroups start
+      # qemu binfmt is required for cross-platform builds
+      sudo rc-service qemu-binfmt start
+      # allow rootless podman
+      echo $USER:100000:65536 | sudo tee /etc/subuid
+      echo $USER:100000:65536 | sudo tee /etc/subgid
       sleep 1
 
   # build the image using the just recipe
   #   - sudo (-u root) is required to run podman without more setup
   - build: |
       cd alpine-cli
-      # sudo --preserve-env just build
-      sudo --preserve-env go-task build
+      go-task build
 
   # publish the image using the just recipe
   #   - set environment variables from the ~/.envdir directory. see
   #   http://smarden.org/runit/chpst.8.html for details on chpst
   #   - sudo (-u root) is required to run podman without more setup
   #   - sudo --preserve-env is required to pass environment variables 
-#  - publish: |
-#      cd alpine-cli
-#      chpst -e ~/.envdir sudo --preserve-env just registry_pass_var=GH_PAT publish
-      # chpst -e ~/.envdir sudo --preserve-env go-task publish
+  - publish: |
+      cd alpine-cli
+      chpst -e ~/.envdir go-task publish
       # chpst -e ~/.envdir sudo --preserve-env just registry=docker.io registry_pass_var=DH_PAT publish
       # chpst -e ~/.envdir sudo --preserve-env just registry=quay.io registry_pass_var=QUAY_PAT publish