Initial build

.gitlab-ci.yml

+---
+variables:
+  JOBS: 8
+  STORAGE_DRIVER: 'vfs'
+
+default:
+  image: 'quay.io/containers/buildah'
+  before_script:
+    - 'cp "$REGISTRIES_CONF" /etc/containers/registries.conf'
+
+'Build nest/tools/buildah:haswell':
+  stage: 'build'
+  tags: ['nest']
+  script:
+    - 'buildah bud --pull
+                   --creds="${CI_REGISTRY_USER}:${CI_REGISTRY_PASSWORD}"
+                   --security-opt seccomp=unconfined
+                   --build-arg STAGE1_TAG=haswell-server
+                   --build-arg FACTER_build=stage1
+                   --build-arg FACTER_emerge_default_opts="--jobs=${JOBS} --usepkg"
+                   --build-arg FACTER_makeopts="-j${JOBS}"
+                   -v "${PUPPET_CERTIFICATE}:/etc/puppetlabs/puppet/ssl/certs/ci.pem"
+                   -v "${PUPPET_PRIVATE_KEY}:/etc/puppetlabs/puppet/ssl/private_keys/ci.pem"
+                   -v /nest:/nest
+                   -t "${CI_REGISTRY_IMAGE}:haswell" .'
+    - 'buildah push --creds="${CI_REGISTRY_USER}:${CI_REGISTRY_PASSWORD}" "${CI_REGISTRY_IMAGE}:haswell"'

Containerfile

+ARG STAGE1_TAG
+FROM nest/stage1:${STAGE1_TAG}
+
+ARG FACTER_build
+ARG FACTER_emerge_default_opts
+ARG FACTER_makeopts
+RUN FACTER_tool=buildah puppet agent --test --certname ci --logdir /var/log/puppet --rundir /var/run/puppet --vardir /var/lib/puppet --runtimeout 0; [ $? -eq 2 ]
+
+ENV BUILDAH_ISOLATION=chroot
+ENTRYPOINT ["/usr/bin/buildah"]