janitor: Use podman to run worker container.

Signed-off-by: Holger Levsen <holger@layer-acht.org>

bin/janitor_setup_worker.sh

@@ -8,7 +8,6 @@ DEBUG=true
 . /srv/jenkins/bin/common-functions.sh
 common_init "$@"
 
-sudo adduser jenkins docker
-docker pull eu.gcr.io/debian-janitor/worker
+sudo sysctl kernel.unprivileged_userns_clone=1
 
 # vim: set sw=0 noet :

bin/janitor_worker.sh

@@ -2,7 +2,7 @@
 
 set -e
 
-docker run --rm --cap-add=SYS_ADMIN --privileged \
+podman run --pull always --rm --cap-add=SYS_ADMIN --privileged \
 	--memory=20g \
 	-v /srv/janitor:/srv/janitor \
 	-e BUILD_URL="${BUILD_URL}" \

update_jdn.sh

@@ -413,7 +413,7 @@ if [ -f /etc/debian_version ] ; then
 		esac
 		case $HOSTNAME in
 			osuosl167*) DEBS="$DEBS
-				docker.io
+				podman
 				" ;;
 		esac
 		# notifications are only done from a few nodes