Update cross-platform-build-verification.yml

Author: 1minds3t

.github/workflows/cross-platform-build-verification.yml

@@ -110,8 +110,9 @@ jobs:
           pip install dist/*.whl
           omnipkg --version
           omnipkg list
+
   # ═══════════════════════════════════════════════════════════════════
-  # 2. CRITICAL TESTS (Podman) - FIXED WITH --userns=keep-id
+  # 2. CRITICAL TESTS (Podman) - FIXED: Standard rootless with label=disable
   # ═══════════════════════════════════════════════════════════════════
   linux-distros-podman-critical:
     name: Podman - ${{ matrix.distro }} (${{ matrix.platform }})
@@ -129,7 +130,7 @@ jobs:
           - distro: fedora:39
             platform: linux/amd64
 
-          # ARM64 QEMU (Debian & Rocky ONLY - Removed Ubuntu & Alpine)
+          # ARM64 QEMU (Debian & Rocky ONLY)
           - distro: debian:12
             platform: linux/arm64
           - distro: rockylinux:9
@@ -152,11 +153,11 @@ jobs:
           
           if [[ "${{ matrix.distro }}" == *"alpine"* ]]; then SHELL="/bin/sh"; else SHELL="/bin/bash"; fi
           
-          # Use podman unshare to run in user namespace, then exec container
-          # This completely bypasses newuidmap by pre-entering the namespace
-          podman unshare podman run --rm \
-            --tmpfs /tmp:rw,noexec,nosuid,size=1g \
-            -v $TEST_DIR:/workspace \
+          # Use standard rootless Podman with label=disable to avoid SELinux issues
+          # No userns flags needed - Podman's default rootless mode now works after storage cleanup
+          podman run --rm \
+            --security-opt label=disable \
+            -v $TEST_DIR:/workspace:rw \
             --platform ${{ matrix.platform }} \
             ${{ matrix.distro }} $SHELL -c "
             cd /workspace
@@ -167,7 +168,7 @@ jobs:
             elif command -v dnf > /dev/null 2>&1; then 
               dnf install -y python3 python3-pip gcc python3-devel
             elif command -v apk > /dev/null 2>&1; then 
-              apk add --no-cache python3 py3-pip py3-build gcc python3-dev musl-headers
+              apk add --no-cache python3 py3-pip py3-build gcc python3-dev musl-dev linux-headers
             fi
             
             python3 -m pip install --upgrade pip build || python3 -m pip install --break-system-packages pip build
@@ -176,6 +177,7 @@ jobs:
             omnipkg --version
             omnipkg list
           "
+
   # ═══════════════════════════════════════════════════════════════════
   # 3. DOCKER JOBS
   # ═══════════════════════════════════════════════════════════════════
@@ -202,6 +204,7 @@ jobs:
             omnipkg --version
             omnipkg list
           "
+
   linux-distros-docker-rhel:
     name: Docker - RHEL/Fedora
     runs-on: ubuntu-latest
@@ -229,6 +232,7 @@ jobs:
             omnipkg --version
             omnipkg list
           "
+
   linux-distros-docker-other:
     name: Docker - Arch/Alpine
     runs-on: ubuntu-latest
@@ -256,6 +260,7 @@ jobs:
             omnipkg --version
             omnipkg list
           "
+
   # ═══════════════════════════════════════════════════════════════════
   # 4. README STATS
   # ═══════════════════════════════════════════════════════════════════