Try specifying IP address instead. Also enable hermetic mode.

Author: tecarter94

deploy/tasks/buildah-oci-ta.yaml

@@ -467,7 +467,6 @@ spec:
         # Without expansion
         cat > /app/build-script.sh << 'EOF'
         #!/bin/sh
-        ip link set dev lo up
         /app/domain-proxy-client-runner &
         client_pid=$!
         EOF
@@ -524,7 +523,6 @@ spec:
         capabilities:
           add:
             - SETFCAP
-            - NET_ADMIN
     - name: sbom-syft-generate
       image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
       workingDir: /var/workdir/source

java-components/domain-proxy/server/src/main/java/com/redhat/hacbs/domainproxy/DomainProxyServer.java

@@ -27,7 +27,7 @@
 @Singleton
 public class DomainProxyServer {
 
-    static final String LOCALHOST = "localhost";
+    static final String LOCALHOST = "127.0.0.1";
 
     @Inject
     @ConfigProperty(name = "server-domain-socket")

pkg/reconciler/dependencybuild/buildrecipeyaml.go

@@ -530,6 +530,13 @@ func createPipelineSpec(log logr.Logger, tool string, commitTime int64, jbsConfi
 						StringVal: domainProxyImage,
 					},
 				},
+				{
+					Name: "HERMETIC",
+					Value: tektonpipeline.ParamValue{
+						Type:      tektonpipeline.ParamTypeString,
+						StringVal: "true",
+					},
+				},
 			},
 		}}, ps.Tasks...)