Skip to content

apko_image action runs on RBE workers under Bazel 9, fails with permission denied #331

Description

@rajatvig

Under Bazel 9 with --remote_executor + --extra_execution_platforms, apko_image
actions are dispatched to remote workers and fail:

unable to create cache directory "...cache_apko_amd64/https%3A%2F%2F...": permission denied

Why: Bazel 8 kept toolchain-less run_shell actions on the host platform by
default. Bazel 9 enforces consistent platform ordering, so --extra_execution_platforms
now wins for all actions including apko's.

It's also worth noting that use_default_shell_env = True inherits the local shell
environment, which may not be available on remote workers.

Versions: rules_apko 1.5.47, Bazel 9.1.1.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions