From 0dbf647bb74864793e563ee44c3f2a3f7e8191e1 Mon Sep 17 00:00:00 2001
From: "Gan, Jimmy" <jimmy.gan@adidas.com>
Date: Sat, 4 Apr 2026 10:11:41 +0800
Subject: [PATCH] fix: use docker run with host network for deploy to avoid
 permissions issue

---
 .gitea/workflows/deploy-dev.yml | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/deploy-dev.yml b/.gitea/workflows/deploy-dev.yml
index 3baae40..608c19f 100644
--- a/.gitea/workflows/deploy-dev.yml
+++ b/.gitea/workflows/deploy-dev.yml
@@ -64,6 +64,11 @@ jobs:
       - name: Deploy dev
         run: |
           export DOCKER_API_VERSION=1.43
-          # Use nsenter to run in host network namespace to avoid Docker-in-Docker network limitations
-          nsenter -t 1 -n docker rm -f nas-dashboard-dev || true
-          nsenter -t 1 -n docker compose -f /volume1/docker/nas-dashboard/docker-compose.dev.yml up -d --pull never
+          # Run deploy in a container with host network to avoid Docker-in-Docker limitations
+          docker run --rm --network host \
+            -v /var/run/docker.sock:/var/run/docker.sock \
+            -v /volume1/docker/nas-dashboard:/nas-dashboard \
+            docker:cli sh -c "
+              docker rm -f nas-dashboard-dev || true
+              docker compose -f /nas-dashboard/docker-compose.dev.yml up -d --pull never
+            "