buildah-shared.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: buildah-shared-ex
spec:
  replicas: 1
  selector:
    matchLabels:
      app: buildah-shared-ex
  template:
    metadata:
      labels:
        app: buildah-shared-ex
    spec:
      serviceAccountName: buildah-sa
      volumes:
        - name: node-storage-root
          hostPath:
            path: /var/lib/containers/storage
            type: DirectoryOrCreate
        - name: container-storage-root
          emptyDir: {}
      containers:
        - name: buildah
          image: quay.io/buildah/upstream:latest
          imagePullPolicy: IfNotPresent
          args:
            - sleep
            - "3600"
          volumeMounts:
            - name: node-storage-root
              mountPath: /var/lib/shared
              readOnly: true
            - name: container-storage-root
              mountPath: /var/lib/containers/storage

sa.sh

oc create serviceaccount buildah-sa
oc adm policy add-scc-to-user privileged --serviceaccount=buildah-sa