running docker/build-push-action on osx fails with connect: permission denied

[erik-romson]

As described. Several solutions for Linux with adding group, however not for OSX (not by choice :-( ) running docker with docker desktop 4.31.0 (153195)

Please help as I'm really stuck

Description:

run with

$ gh act -W .github/workflows/test-acl.yaml -s GITHUB_TOKEN="$(gh auth token)"  --container-architecture linux/amd64  --verbose

workflow

name: Build Docker Image with Buildx

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build container image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./simpleDockerfile
          push: false
          load: true # Loads the built image into Docker environment, useful for testing
          tags: my-image:latest

      - name: Run image
        run: |
          docker run --rm my-image:latest

and Docker file

FROM alpine:3.20.3

RUN echo 'Hello, World!' 

log:

[Build Docker Image with Buildx/build] [DEBUG] Working directory '/Users/erik/projects/common-actions'
[Build Docker Image with Buildx/build]   💬  ::debug::Docker.isAvailable ok: /usr/bin/docker
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.isStandalone: false
[Build Docker Image with Buildx/build]   ❓  ::group::Docker info
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.exec: docker version
| [command]/usr/bin/docker version
| Client: Docker Engine - Community
|  Version:           26.1.3
|  API version:       1.45
|  Go version:        go1.21.10
|  Git commit:        b72abbb
|  Built:             Thu May 16 08:33:29 2024
|  OS/Arch:           linux/amd64
|  Context:           default
| permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.45/version": dial unix /var/run/docker.sock: connect: permission denied
| The process '/usr/bin/docker' failed with exit code 1
[Build Docker Image with Buildx/build]   ❓  ::endgroup::
[Build Docker Image with Buildx/build]   💬  ::debug::Docker.isAvailable ok: /usr/bin/docker
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.isStandalone: false
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.getExecOutput: docker buildx
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.isAvailable: true
[Build Docker Image with Buildx/build]   ❓  ::group::Buildx version
[Build Docker Image with Buildx/build]   💬  ::debug::Docker.isAvailable ok: /usr/bin/docker
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.isStandalone: false
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.exec: docker buildx version
| [command]/usr/bin/docker buildx version
| github.com/docker/buildx v0.17.1 257815a6fbaee88976808020bf04274388275ae8
[Build Docker Image with Buildx/build]   ❓  ::endgroup::
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.getExecOutput: docker context inspect --format {{.Name}}
[Build Docker Image with Buildx/build]   ❓  ::group::Inspecting default docker context
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.getExecOutput: docker context inspect --format=json default
| [
|   {
|     "Name": "default",
|     "Metadata": {},
|     "Endpoints": {
|       "docker": {
|         "Host": "unix:///var/run/docker.sock",
|         "SkipTLSVerify": false
|       }
|     },
|     "TLSMaterial": {},
|     "Storage": {
|       "MetadataPath": "<IN MEMORY>",
|       "TLSPath": "<IN MEMORY>"
|     }
|   }
| ]
[

docker is running and "Allow the default Docker socket to be used (requires password)" is checked

% ls -al /var/run/docker.sock
lrwxr-xr-x  1 root  daemon  35 Nov 13 07:28 /var/run/docker.sock -> /Users/erik/.docker/run/docker.sock

 % ls -l /Users/erik/.docker/run/docker.sock
srwxrwxrwx@ 1 erik  staff  0 Nov 13 07:31 /Users/erik/.docker/run/docker.sock

when starting with

... --container-options '-e DOCKER_HOST="unix:///Users/erik/.docker/run/docker.sock" -e RUNNER_TEMP=/tmp' 

I get error

[Build Docker Image with Buildx/build]   💬  ::debug::Exec.getExecOutput: docker context inspect --format=json default
| [
|   {
|     "Name": "default",
|     "Metadata": {},
|     "Endpoints": {
|       "docker": {
|         "Host": "unix:///Users/erik/.docker/run/docker.sock",
|         "SkipTLSVerify": false
|       }
|     },
|     "TLSMaterial": {},
|     "Storage": {
|       "MetadataPath": "<IN MEMORY>",
|       "TLSPath": "<IN MEMORY>"
|     }
|   }
| ]
[Build Docker Image with Buildx/build]   ❓  ::endgroup::
[Build Docker Image with Buildx/build]   ❓  ::group::Creating a new builder instance
[Build Docker Image with Buildx/build]   💬  ::debug::Docker.isAvailable ok: /usr/bin/docker
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.isStandalone: false
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.getExecOutput: docker buildx version
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.versionSatisfies 0.17.1 statisfies >=0.3.0: true
[Build Docker Image with Buildx/build]   💬  ::debug::Docker.isAvailable ok: /usr/bin/docker
[Build Docker Image with Buildx/build]   💬  ::debug::Buildx.isStandalone: false
[Build Docker Image with Buildx/build]   💬  ::debug::Exec.getExecOutput: docker buildx create --name builder-9ede268e-14cf-4242-b85e-251926cb2dd2 --driver docker-container --buildkitd-flags --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host --use
| [command]/usr/bin/docker buildx create --name builder-9ede268e-14cf-4242-b85e-251926cb2dd2 --driver docker-container --buildkitd-flags --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host --use
| ERROR: failed to initialize builder builder-9ede268e-14cf-4242-b85e-251926cb2dd2 (builder-9ede268e-14cf-4242-b85e-251926cb2dd20): Cannot connect to the Docker daemon at unix:///Users/erik/.docker/run/docker.sock. Is the docker daemon running?
[Bui

When running in terminal in the act-build-and-deploy-deploy- container

$ docker ps
permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.45/containers/json": dial unix /var/run/docker.sock: connect: permission denied