another attempt to build an image inside container inside container

.gitlab-ci.yml

@@ -61,15 +61,17 @@ container_image_build:
   stage: build
   image: docker.io/debian:bookworm-slim
   services: []
-  before_script: []
   rules:
     - if: $CI_COMMIT_BRANCH == 'develop'
-  script:
+  before_script:
     - apt-get update && apt-get -y upgrade
-    - apt-get install -y --no-install-recommends buildah ca-certificates
+    - apt-get install -y --no-install-recommends buildah ca-certificates fuse-overlayfs
     - buildah login --username "${CI_REGISTRY_USER}" --password "${CI_REGISTRY_PASSWORD}" "${CI_REGISTRY}"
-    - buildah build --security-opt seccomp=unconfined --cap-add all --tag "${CI_REGISTRY}/${CI_PROJECT_PATH}/develop:not-for-production" --platform linux/amd64 .
-    - buildah push "${CI_REGISTRY}/${CI_PROJECT_PATH}/develop:not-for-production" "docker://${CI_REGISTRY}/${CI_PROJECT_PATH}/develop:not-for-production"
+    - export IMAGE_TAG="${CI_REGISTRY}/${CI_PROJECT_PATH}/develop:not-for-production"
+  script:
+    - buildah build --isolation chroot --device /dev/fuse:rw --security-opt seccomp=unconfined --security-opt apparmor=unconfined --cap-add all --tag "${IMAGE_TAG}" --platform linux/amd64 .
+    - buildah inspect "${IMAGE_TAG}"
+    - buildah push "${IMAGE_TAG}" "docker://${IMAGE_TAG}"
 
 cargo_unit_test:
   stage: test