From 1efc79e880d7e05ee0bae02d829db580028eb3d8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Martins?= <andre@cilium.io>
Date: Fri, 14 Jun 2024 11:36:59 +0200
Subject: [PATCH] wip
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: André Martins <andre@cilium.io>
---
 .github/actions/renovate/entrypoint.sh | 7 +++++++
 .github/workflows/renovate.yaml        | 1 +
 2 files changed, 8 insertions(+)
 create mode 100755 .github/actions/renovate/entrypoint.sh

diff --git a/.github/actions/renovate/entrypoint.sh b/.github/actions/renovate/entrypoint.sh
new file mode 100755
index 00000000000000..09edef12cb8e35
--- /dev/null
+++ b/.github/actions/renovate/entrypoint.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+apt update
+
+apt install -y envsubst
+
+runuser -u ubuntu renovate
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index a138968ce82b83..16f23f313a482f 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -39,6 +39,7 @@ jobs:
           # default to DEBUG log level, this is always useful
           LOG_LEVEL: ${{ github.event.inputs.renovate_log_level_debug == 'false' && 'INFO' || 'DEBUG' }}
         with:
+          docker-cmd-file: .github/actions/renovate/entrypoint.sh
           configurationFile: .github/renovate.json5
           token: '${{ steps.get_token.outputs.app_token }}'
           mount-docker-socket: true