(fix) restore sudo-capability after recent changes (#3964) #20

	# Workflow that builds, tests and then pushes the app docker images to the ghcr.io repository
	name: Build and Publish App Image

	# Always run on "main"
	# Always run on tags
	# Always run on PRs
	# Can also be triggered manually
	on:
	push:
	branches:
	- main
	tags:
	- '*'
	pull_request:
	workflow_dispatch:
	inputs:
	reason:
	description: 'Reason for manual trigger'
	required: true
	default: ''

	jobs:
	# Builds the OpenHands Docker images
	ghcr_build:
	name: Build App Image
	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Free Disk Space (Ubuntu)
	uses: jlumbroso/free-disk-space@main
	with:
	# this might remove tools that are actually needed,
	# if set to "true" but frees about 6 GB
	tool-cache: true
	# all of these default to true, but feel free to set to
	# "false" if necessary for your workflow
	android: true
	dotnet: true
	haskell: true
	large-packages: true
	docker-images: false
	swap-storage: true
	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3
	- name: Login to GHCR
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.repository_owner }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- name: Set up Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@v3
	- name: Build and push app image
	if: "!github.event.pull_request.head.repo.fork"
	run: \|
	./containers/build.sh openhands ${{ github.repository_owner }} --push
	- name: Build app image
	if: "github.event.pull_request.head.repo.fork"
	run: \|
	./containers/build.sh openhands image ${{ github.repository_owner }}

Provide feedback