spec:
  securityContext:
    fsGroup: 1000
  containers:
  - name: buildroot
    image: registry.pyrocufflink.blue/buildroot
    command:
    - sleep
    - infinity
    volumeMounts:
    - name: tmp
      mountPath: /tmp
    - name: br2-ccache
      mountPath: /home/jenkins/.buildroot-ccache
    securityContext:
      readOnlyRootFilesystem: true
      runAsUser: 1000
  - name: buildah
    image: quay.io/containers/buildah:v1
    command:
    - sleep
    - infinity
    securityContext:
      privileged: true
  volumes:
  - name: tmp
    emptyDir:
      medium: Memory
      sizeLimit: 100Mi
  - name: br2-ccache
    persistentVolumeClaim:
      claimName: jenkins-br2-ccache