fix(ci): Set HOME=/root via GITHUB_ENV and fix E2E temp path

GHA strips -e flags from container options, so HOME can't be overridden
that way. Instead, add a 'Fix HOME for root user' step that writes
HOME=/root to GITHUB_ENV at the start of every container job.

Firefox requires HOME to be owned by the current user (root), and GHA
sets HOME=/github/home (owned by runner).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: mydea

.github/docker/playwright.Dockerfile

@@ -29,3 +29,9 @@ RUN sudo mkdir -p /opt/pw-browsers && \
 # Mark GitHub Actions workspace as safe for git (system-wide config so it
 # works regardless of HOME, which GHA overrides to /github/home).
 RUN sudo git config --system --add safe.directory '*'
+
+# Ensure /root exists and is owned by root. When running as --user root,
+# Firefox requires HOME to be owned by the current user. GHA sets
+# HOME=/github/home (owned by runner), but we can't override it.
+# The workflow sets HOME=/root via a step, and this ensures /root is ready.
+RUN mkdir -p /root

.github/workflows/build.yml

@@ -500,7 +500,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 25
     strategy:
       fail-fast: false
@@ -550,6 +550,8 @@ jobs:
             project: 'chromium'
 
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v6
         with:
@@ -604,7 +606,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -619,6 +621,8 @@ jobs:
           - loader_tracing_replay
 
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v6
         with:
@@ -824,13 +828,15 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 15
     strategy:
       fail-fast: false
       matrix:
         node: [18, 20, 22, 24]
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v6
         with:
@@ -928,7 +934,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 15
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow
@@ -943,6 +949,8 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.job_e2e_prepare.outputs.matrix) }}
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v6
         with:
@@ -1053,7 +1061,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 15
     env:
       E2E_TEST_AUTH_TOKEN: ${{ secrets.E2E_TEST_AUTH_TOKEN }}
@@ -1069,6 +1077,8 @@ jobs:
       matrix: ${{ fromJson(needs.job_e2e_prepare.outputs.matrix-optional) }}
 
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v6
         with:

.github/workflows/canary.yml

@@ -77,7 +77,7 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 20
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow
@@ -145,6 +145,8 @@ jobs:
             label: 'nestjs-microservices (latest)'
 
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current commit
         uses: actions/checkout@v6
         with:

.github/workflows/flaky-test-detector.yml

@@ -45,12 +45,14 @@ jobs:
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-      options: --ipc=host --user root -e HOME=/root
+      options: --ipc=host --user root
     timeout-minutes: 60
     name: 'Check tests for flakiness'
     # Also skip if PR is from master -> develop
     if: ${{ github.base_ref != 'master' && github.ref != 'refs/heads/master' }}
     steps:
+      - name: Fix HOME for root user
+        run: echo "HOME=/root" >> $GITHUB_ENV
       - name: Check out current branch
         uses: actions/checkout@v6
       - name: Set up Node