Refactor Dockerfiles for Gitea runners: update package installations, remove obsolete files, and enhance build configurations

ansible/files/dockerfiles/linux-runners/Dockerfile.cicd-base

@@ -2,17 +2,37 @@ FROM local/gitea-runner-base:latest
 
 # cicd-base runner profile: common CI build and release tooling.
 USER root
-RUN apk add --no-cache \
-	bash \
+RUN apt-get update && apt-get install -y --no-install-recommends \
+	buildah \
 	ca-certificates \
 	curl \
+	fuse-overlayfs \
 	git \
+	iptables \
 	jq \
 	make \
 	openssh-client \
+	podman \
 	python3 \
-	py3-pip \
+	python3-pip \
 	rsync \
+	skopeo \
+	slirp4netns \
+	uidmap \
 	unzip \
-	yq \
-	zip
+	zip \
+	&& rm -rf /var/lib/apt/lists/*
+
+RUN mkdir -p /etc/containers /var/lib/containers /run/containers && \
+	printf '%s\n' '[storage]' 'driver = "vfs"' > /etc/containers/storage.conf && \
+	printf '%s\n' '[engine]' > /etc/containers/containers.conf
+
+ENV BUILDAH_ISOLATION=chroot
+ENV STORAGE_DRIVER=vfs
+
+ARG TRIVY_VERSION=0.72.0
+RUN curl -fsSL -o /tmp/trivy.tar.gz \
+	"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
+	tar -xzf /tmp/trivy.tar.gz -C /tmp && \
+	install -m 0755 /tmp/trivy /usr/local/bin/trivy && \
+	rm -f /tmp/trivy.tar.gz /tmp/trivy