cat >build.yaml <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: buildah
  namespace: sandboxed-builds
spec:
  runtimeClassName: kata
  containers:
    - name: buildah
      image: quay.io/buildah/stable:v1.23.0
      command: ["sleep", "infinity"]
      securityContext:
        privileged: true
EOF

oc create ns sandboxed-builds
oc apply -f build.yaml
oc exec -it buildah bash
mknod /dev/fuse -m 0666 c 10 229
mkdir /build && cd /build

cat >Dockerfile <<EOF
FROM quay.io/fedora/fedora:33
RUN date
EOF

buildah bud  -f Dockerfile .