ci: Add CAP_CHROOT to build container

This is needed in order to run `passwd -R` to clear the root password
in the target filesystem.

ci/podTemplate.yaml

@@ -13,6 +13,7 @@ spec:
       capabilities:
         add:
         - CAP_SETFCAP
+        - CAP_SYS_CHROOT
     volumeMounts:
     - mountPath: /build
       name: workspace-volume
@@ -21,12 +22,21 @@ spec:
       name: workspace-volume
       subPath: gentoo
     - mountPath: /usr/aarch64-unknown-linux-gnu/var/cache/binpkgs
-      name: workspace-volume
+      name: binpkgs
-      subPath: binpkgs
+      subPath: photoframe2
     - mountPath: /var/cache/binpkgs
-      name: workspace-volume
+      name: binpkgs
-      subPath: binpkgs
+      subPath: photoframe2
     - mountPath: /var/cache/distfiles
       name: workspace-volume
       subPath: distfiles
+    - mountPath: /var/db/repos/gentoo
+      name: portage
   hostUsers: false
+  volumes:
+  - name: binpkgs
+    persistentVolumeClaim:
+      claimName: binpkgs
+  - name: portage
+    persistentVolumeClaim:
+      claimName: portage

prepare.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+
+if [ ! -f /var/db/repos/gentoo/metadata/timestamp ]; then
+    emerge-webrsync
+fi
+if [ "$(find /var/db/repos/gentoo/metadata -newermt '-24 hours' | wc -l)" -eq 0 ]; then
+    emaint sync
+fi