can we make it more sane by running the whole thing in the container?

Author: EzraBrooks

.github/workflows/ci.yaml

@@ -71,21 +71,8 @@ jobs:
 
     name: ${{ matrix.env.IMAGE }}${{ matrix.env.CCOV && ' + ccov' || ''}}${{ matrix.env.IKFAST_TEST && ' + ikfast' || ''}}${{ matrix.env.CLANG_TIDY && (github.event_name != 'workflow_dispatch' && ' + clang-tidy (delta)' || ' + clang-tidy (all)') || '' }}
     runs-on: ubuntu-latest
+    container: moveit/moveit2:${{ matrix.env.IMAGE }}
     steps:
-      - name: "Free up disk space"
-        if: matrix.env.CCOV
-        run: |
-          sudo apt-get -qq purge "ghc*"
-          sudo apt-get clean
-          # cleanup docker images not used by us
-          docker system prune -af
-          # shift ccache folder to /mnt on a separate disk
-          sudo mkdir /mnt/ccache
-          mkdir ${{ env.CCACHE_DIR }}
-          sudo mount --bind ${{ env.CCACHE_DIR }} /mnt/ccache
-          # free up a lot of stuff from /usr/local
-          sudo rm -rf /usr/local
-          df -h
       - uses: actions/checkout@v6
       # NOTE: Testspace is temporarily disabled and needs to be installed for the MoveIt org
       # See: https://github.com/moveit/moveit2/issues/2852
@@ -145,7 +132,10 @@ jobs:
       - id: ici
         name: Run industrial_ci
         uses: ros-industrial/industrial_ci@master
-        env: ${{ matrix.env }}
+        env:
+          CCOV: ${{ matrix.env.CCOV }}
+          CLANG_TIDY: ${{ matrix.env.CLANG_TIDY }}
+          ROS_DISTRO: ${{ matrix.env.ROS_DISTRO }}
       # NOTE: Testspace is temporarily disabled and needs to be installed for the MoveIt org
       # See: https://github.com/moveit/moveit2/issues/2852
       #      - name: Push result to Testspace
@@ -178,10 +168,6 @@ jobs:
         with:
           name: clang-tidy
           path: ${{ env.BASEDIR }}/target_ws/src/$(basename $(pwd))
-      - name: chown the target_ws because it came out of root-owned Docker container filesystem
-        run: sudo chown -R "$USER:$USER" ${{ env.BASEDIR }}/target_ws
-      - name: move sonar-project.properties from checkout into ICI output
-        run: mv sonar-project.properties ${{ env.BASEDIR }}/target_ws
       - name: SonarQube Scan
         # Don't run if SONAR_TOKEN is not set (i.e. PR job from a fork)
         if: matrix.env.CCOV && steps.ici.outputs.target_test_results == '0' && env.SONAR_TOKEN != ''