docker-refresh: force bash for container-based jobs

When a GH Actions job declares a container:, the per-step run: shell
defaults to /bin/sh (dash on the cli image's debian base). The Create
build dependency package step uses $(stat -c'%u:%g' .git) inside an
unquoted heredoc, and dash fails to parse that with a cryptic
'Syntax error: "(" unexpected'. Pin shell: bash for both
process-ci-images and process-freeradius-images.

Also renames process-images to process-ci-images for clarity now
that it only covers the CI runner / build bases plus pull-through
caches.

diff --git a/.github/workflows/docker-refresh.yml b/.github/workflows/docker-refresh.yml
index 9721f19f9c4a526d2f95d3ed5b35e72c1cf1a018..be1df614f93ed4ac1cd78c68423c0ec38f6ff7ae 100644 (file)
--- a/.github/workflows/docker-refresh.yml
+++ b/.github/workflows/docker-refresh.yml
@@ -250,7 +250,7 @@ jobs:
   #  cache mirrors. Runs inside dind + the freshly-built docker-cli
   #  container.
   #
-  process-images:
+  process-ci-images:
     needs: process-docker-cli
     timeout-minutes: 20
 
@@ -278,6 +278,7 @@ jobs:
 
     defaults:
       run:
+        shell: bash
         working-directory: /workspace
 
     strategy:
@@ -578,6 +579,7 @@ jobs:
 
     defaults:
       run:
+        shell: bash
         working-directory: /workspace
 
     name: "freeradius4-{crossbuild,profiling-deps,service}-${{ matrix.os }}"