spec: containers: - name: buildah image: quay.io/containers/buildah:v1 command: - sleep - infinity securityContext: privileged: true