ci: Fix pod UIDs/GIDs

Now that we have _democratic-csi_ for storage management, the old manual
iSCSI volumes are being replaced with dynamically provisioned volumes.
ThiThe new _buildroot-airplaypi_ volume is completely blank, so _root_
owns everything.  The old volume had the correct ownership because it
was originally mounted in a pod that had the default `securityContext`,
before we changed the merge strategy.  We now need to explicitly set the
UIDs and GIDs, since we're not inheriting the default `securityContext`
anymore.

airplaypi_defconfig.in

@@ -2,6 +2,7 @@ BR2_arm=y
 BR2_cortex_a53=y
 BR2_ARM_FPU_NEON_VFPV4=y
 BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_12=y
+BR2_TOOLCHAIN_BUILDROOT_CXX=y
 BR2_GLOBAL_PATCH_DIR="board/raspberrypi/patches"
 BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
 BR2_TARGET_GENERIC_HOSTNAME="airplaypi"
@@ -26,10 +27,17 @@ BR2_PACKAGE_RPI_FIRMWARE_BOOTCODE_BIN=y
 BR2_PACKAGE_RPI_FIRMWARE_VARIANT_PI=y
 BR2_PACKAGE_RPI_FIRMWARE_CONFIG_FILE="$(BR2_EXTERNAL_AIMEEOS_PATH)/board/raspberrypi3/config.txt"
 BR2_PACKAGE_RPI_FIRMWARE_CMDLINE_FILE="$(BR2_EXTERNAL_AIMEEOS_PATH)/board/raspberrypi3/cmdline.txt"
+BR2_PACKAGE_AVAHI=y
+# BR2_PACKAGE_AVAHI_AUTOIPD is not set
+BR2_PACKAGE_AVAHI_DAEMON=y
 BR2_PACKAGE_IPROUTE2=y
 BR2_PACKAGE_IWD=y
 BR2_PACKAGE_OPENSSH=y
 # BR2_PACKAGE_OPENSSH_CLIENT is not set
+BR2_PACKAGE_SHAIRPORT_SYNC=y
+BR2_PACKAGE_SHAIRPORT_SYNC_CONVOLUTION=y
+BR2_PACKAGE_SHAIRPORT_SYNC_DBUS=y
+BR2_PACKAGE_SHAIRPORT_SYNC_LIBSOXR=y
 # BR2_TARGET_ROOTFS_TAR is not set
 BR2_TARGET_UBOOT_BOARD_DEFCONFIG="rpi_3_32b"
 BR2_PACKAGE_HOST_KMOD_XZ=y

ci/podTemplate.yaml

@@ -25,6 +25,9 @@ spec:
   nodeSelector:
     kubernetes.io/arch: amd64
   securityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
     seLinuxOptions:
       level: s0:c596,c675

rootfs-overlay/usr/lib/systemd/system-preset/50-airplaypi.preset

@@ -1 +1,2 @@
 enable root-shell@.service ttyAMA0
+enable shairport-sync.service

rootfs-overlay/usr/lib/systemd/system/shairport-sync.service

@@ -0,0 +1,21 @@
+[Unit]
+Description=Shairport Sync - AirPlay Audio Receiver
+Documentation=man:shairport-sync(7)
+Documentation=file:///usr/share/doc/shairport-sync/README.md.gz
+Documentation=https://github.com/mikebrady/shairport-sync
+After=sound.target
+Requires=avahi-daemon.service
+After=avahi-daemon.service
+Wants=network-online.target
+After=network.target network-online.target
+
+[Service]
+Type=simple
+Restart=on-failure
+ExecStart=/usr/bin/shairport-sync
+DynamicUser=true
+User=shairport-sync
+Group=shairport-sync
+
+[Install]
+WantedBy=multi-user.target