apply changes to install podman step to fix arm64 errors

Author: mtchoum1

.github/actions/free-up-disk-space/action.yml

@@ -4,11 +4,14 @@ description: 'Removes unnecessary packages and files to free up disk space on Gi
 runs:
   using: "composite"
   steps:
-    - name: Free up additional disk space
+    - name: Free up disk space
       shell: bash
       run: |
         set -x
         df -h
+        sudo docker system prune -af  || true
+        sudo apt-get clean
+        sudo rm -rf /tmp/*
         sudo apt-get update
         sudo apt-get purge -y '^dotnet-.*' '^llvm-.*' 'php.*' '^mongodb-.*'
         sudo apt-get autoremove -y --purge
@@ -20,6 +23,5 @@ runs:
         sudo rm -rf /usr/share/dotnet &
         sudo rm -rf /opt/ghc &
         sudo rm -rf /opt/hostedtoolcache/CodeQL &
-        sudo docker image prune --all --force &
         wait
         df -h

.github/actions/install-podman-action/action.yml

@@ -13,6 +13,13 @@ runs:
       shell: bash
       run: sudo apt-get -qq remove podman crun
 
+    # Ensure parent dir exists and is runner-owned so cache restore can set file modes (avoids "Cannot change mode: Operation not permitted").
+    - name: Prepare .linuxbrew parent for cache
+      shell: bash
+      run: |
+        sudo mkdir -p /home/linuxbrew
+        sudo chown -R "$(whoami):$(whoami)" /home/linuxbrew
+
     - uses: actions/cache@v5
       # https://docs.github.com/en/actions/reference/variables-reference#default-environment-variables
       # https://docs.github.com/en/actions/how-tos/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables
@@ -21,6 +28,17 @@ runs:
         path: /home/linuxbrew/.linuxbrew
         key: linuxbrew-${{ runner.os }}-${{ runner.arch }}
 
+    # Restored cache can have wrong ownership or immutable flags; fix so brew/podman and mode changes work.
+    - name: Fix .linuxbrew ownership and permissions after cache restore
+      if: steps.cached-linuxbrew.outputs.cache-hit == 'true'
+      shell: bash
+      run: |
+        if [[ -d /home/linuxbrew/.linuxbrew ]]; then
+          sudo chattr -R -i /home/linuxbrew/.linuxbrew 2>/dev/null || true
+          sudo chown -R "$(whoami):$(whoami)" /home/linuxbrew/.linuxbrew
+          sudo chmod -R u+rwX,go=rX /home/linuxbrew/.linuxbrew
+        fi
+
     - name: Install podman (linux/amd64, or qemu-user emulation)
       if: contains(fromJSON('["linux/amd64", "linux/s390x", "linux/ppc64le"]'), inputs.platform) && steps.cached-linuxbrew.outputs.cache-hit != 'true'
       shell: bash

.github/workflows/build-notebooks-TEMPLATE.yaml

@@ -68,6 +68,8 @@ jobs:
       # Makefile variables
       BUILD_ARCH: ${{ inputs.platform }}
       RELEASE_PYTHON_VERSION: ${{ inputs.python }}
+      # Faster/smaller cache restore on resource-constrained runners (e.g. arm64). RHAIENG-2819
+      GHA_CACHE_ZSTD_LEVEL: "3"
 
     steps:
 
@@ -160,7 +162,7 @@ jobs:
 
       # region Free up disk space
 
-      - name: Free up additional disk space
+      - name: Free up disk space
         uses: ./.github/actions/free-up-disk-space
         # https://docs.github.com/en/actions/learn-github-actions/expressions
         # NOTE: the arm64 GitHub hosted runner does not have the /mnt-mounted scratch disk
@@ -324,7 +326,7 @@ jobs:
           # leave a breadcrumb trail in the logs.
           (while true; do
             echo "=== $(date -u '+%H:%M:%S') ==="
-            df -h | grep "${HOME}/.local/share/containers"
+            df -h / /mnt "${HOME}/.local/share/containers" 2>/dev/null || df -h
             free -h
             sleep 30
           done) &
@@ -567,7 +569,12 @@ jobs:
       - run: df -h
         if: "${{ !cancelled() }}"
 
-      - run: sudo compsize -x "${HOME}/.local/share/containers"
+      - run: |
+          if mountpoint -q "${HOME}/.local/share/containers"; then
+            sudo compsize -x "${HOME}/.local/share/containers"
+          else
+            echo "Skipping compsize: ${HOME}/.local/share/containers is not a btrfs mountpoint."
+          fi
         if: "${{ !cancelled() && steps.install-compsize.outcome == 'success' }}"
 
       # print system logs, useful when hunting for OOM kills

ci/cached-builds/gha_lvm_overlay.sh

@@ -21,6 +21,20 @@ tmp_pv_loop_path=/mnt/tmp-pv.img
 
 VG_NAME=buildvg
 
+
+# Detect if /mnt is a separate block device from /
+ROOT_DEV=$(df --output=source / | tail -1)
+MNT_DEV=$(df --output=source /mnt | tail -1)
+if [[ "$ROOT_DEV" == "$MNT_DEV" ]]; then
+  echo "Single-disk runner (/mnt on same fs as root) — skipping LVM, using root fs directly."
+  mkdir -p "${build_mount_path}"
+  sudo chown -R "${build_mount_path_ownership}" "${build_mount_path}"
+  if [[ ! -d "${GITHUB_WORKSPACE}" ]]; then
+    sudo mkdir -p "${GITHUB_WORKSPACE}"
+    sudo chown -R "${WORKSPACE_OWNER}" "${GITHUB_WORKSPACE}"
+  fi
+  exit 0
+fi
 # github runners have an active swap file in /mnt/swapfile
 # we want to reuse the temp disk, so first unmount swap and clean the temp disk
 echo "Unmounting and removing swap file."

ci/cached-builds/storage.conf

@@ -3,6 +3,9 @@
 # Multiple users sharing the same containers/storage is not "supported" as it tends to cause
 # various permission issues on the host or wrong uid/gids in the containers. C.f.
 #  https://access.redhat.com/solutions/6986565
+#
+# graphroot/runroot point at the LVM-backed build volume (gha_lvm_overlay.sh) so heavy
+# image pulls and layers stay off the runner root partition. RHAIENG-2819
 [storage]
 driver = "overlay"