fix(buildah): unable to find "pasta" binary

Signed-off-by: Ilya Lesikov <ilya@lesikov.com>

pkg/buildah/common.go

@@ -20,7 +20,11 @@ import (
 )
 
 const (
-	DefaultShmSize              = "65536k"
+	DefaultShmSize          = "65536k"
+	DefaultContainersConfig = `
+[network]
+default_rootless_network_cmd="slirp4netns"
+`
 	DefaultSignaturePolicy      = `{"default": [{"type": "insecureAcceptAnything"}], "transports": {"docker-daemon": {"": [{"type": "insecureAcceptAnything"}]}}}`
 	DefaultRegistriesConfig     = `unqualified-search-registries = ["docker.io"]`
 	BuildahImage                = "registry.werf.io/werf/buildah:v1.22.3-1"

pkg/buildah/native_linux.go

@@ -71,6 +71,7 @@ type NativeBuildah struct {
 	InstanceTmpDir          string
 	ConfigTmpDir            string
 	SignaturePolicyPath     string
+	ContainersConfigPath    string
 	RegistriesConfigPath    string
 	RegistriesConfigDirPath string
 	Insecure                bool
@@ -111,6 +112,15 @@ func NewNativeBuildah(commonOpts CommonBuildahOpts, opts NativeModeOpts) (*Nativ
 		return nil, fmt.Errorf("unable to write file %q: %w", b.SignaturePolicyPath, err)
 	}
 
+	b.ContainersConfigPath = filepath.Join(b.ConfigTmpDir, "containers.conf")
+	if err := ioutil.WriteFile(b.ContainersConfigPath, []byte(DefaultContainersConfig), os.ModePerm); err != nil {
+		return nil, fmt.Errorf("unable to write file %q: %w", b.ContainersConfigPath, err)
+	}
+
+	if err := os.Setenv("CONTAINERS_CONF", b.ContainersConfigPath); err != nil {
+		return nil, fmt.Errorf("unable to set env var CONTAINERS_CONF: %w", err)
+	}
+
 	b.RegistriesConfigPath = filepath.Join(b.ConfigTmpDir, "registries.conf")
 	if err := ioutil.WriteFile(b.RegistriesConfigPath, []byte(DefaultRegistriesConfig), os.ModePerm); err != nil {
 		return nil, fmt.Errorf("unable to write file %q: %w", b.RegistriesConfigPath, err)