try buildah to replace kaniko (#35289)

* try buildah to replace kaniko

* trigger post-commit

Author: liferoad

.github/trigger_files/beam_PostCommit_Python_ValidatesContainer_Dataflow.json

@@ -1,4 +1,4 @@
 {
     "comment": "Modify this file in a trivial way to cause this test suite to run",
-    "modification": 3
+    "modification": 4
 }

sdks/python/apache_beam/runners/portability/sdk_container_builder.py

@@ -247,16 +247,18 @@ def _invoke_docker_build_and_push(self, container_image_name):
       build.options.machineType = self._cloud_build_machine_type
     build.steps = []
     step = cloudbuild.BuildStep()
-    step.name = 'gcr.io/kaniko-project/executor:latest'
-    # Disable compression caching to allow for large images to be cached.
-    # See: https://github.com/GoogleContainerTools/kaniko/issues/1669
+    step.name = 'quay.io/buildah/stable:latest'
+    step.entrypoint = 'sh'
     step.args = [
-        '--destination=' + container_image_name,
-        '--cache=true',
-        '--compressed-caching=false',
+        '-c',
+        # The --storage-driver=vfs option is used to run buildah in a
+        # rootless environment.
+        (
+            'buildah bud --storage-driver=vfs -t {0} . && '
+            'buildah push --storage-driver=vfs {0} docker://{0}'
+        ).format(container_image_name),
     ]
     step.dir = SOURCE_FOLDER
-
     build.steps.append(step)
 
     source = cloudbuild.Source()