From b041ffc1d299914d74589ee4bce6ffa02f4bc7fd Mon Sep 17 00:00:00 2001
From: Callen Flynn <170468817+callenflynn@users.noreply.github.com>
Date: Sat, 29 Aug 2026 09:06:18 +0000
Subject: [PATCH] fix: add GHCR login to disk build job
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The build job pulls versioned container images from GHCR but never
authenticates, causing 'unauthorized' failures when the package
registry requires login. Add a GHCR login step after checkout so
podman can pull the private images.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>
---
 .github/workflows/build-disk.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/build-disk.yml b/.github/workflows/build-disk.yml
index 5c3e329..07f2a27 100644
--- a/.github/workflows/build-disk.yml
+++ b/.github/workflows/build-disk.yml
@@ -199,6 +199,13 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
       # Ensure no stale podman state from the runner or previous jobs
       # interferes with bootc-image-builder (fixes libpod_lock / overlay
       # busy errors seen on ARM64 and occasional x86_64 runners).