@@ -5,6 +5,7 @@
 
 import * as assert from 'assert';
 import * as path from 'path';
+import { readFile, writeFile } from 'fs/promises';
 import { shellExec } from './testUtils';
 
 const pkg = require('../../package.json');
@@ -18,6 +19,20 @@ describe('Dev Containers CLI using Podman', function () {
 	before('Install', async () => {
 		await shellExec(`rm -rf ${tmp}/node_modules`);
 		await shellExec(`mkdir -p ${tmp}`);
+		if (process.env.GITHUB_ACTIONS === 'true') {
+			const storageConfig = path.join(process.env.HOME!, '.config', 'containers', 'storage.conf');
+			const storageConfigContent = await readFile(storageConfig, 'utf8');
+			const updatedStorageConfigContent = storageConfigContent.replace(
+				/^(\s*ignore_chown_errors\s*=\s*)"true"/m,
+				'$1"false"'
+			);
+			if (updatedStorageConfigContent !== storageConfigContent) {
+				// The hosted runner's Podman bundle enables ownership squashing,
+				// which prevents APT's unprivileged _apt user from writing during builds.
+				await shellExec('podman system reset --force');
+				await writeFile(storageConfig, updatedStorageConfigContent);
+			}
+		}
 		await shellExec(`npm --prefix ${tmp} install devcontainers-cli-${pkg.version}.tgz`);
 	});