[build] update base docker image for pypi build

.github/workflows/publish-to-pypi.yml

@@ -6,12 +6,16 @@ on:
       - '[0-9]+.[0-9]+.[0-9]+'
       - '[0-9]+.[0-9]+.[0-9]+rc[0-9]+'
 
+permissions:
+  contents: write
+
 jobs:
   build:
     name: Build distribution 📦
     runs-on: ubuntu-latest
     container:   # we have to provide a working triqs installation to make the cmake step work
-      image: flatironinstitute/triqs:latest
+      # image: flatironinstitute/triqs:latest # this does not work since actions/checkout only accepts root as a user, triqs docker images setups a new user
+      image: ghcr.io/triqs/solid_dmft_github_ci:3.2.x
 
     steps:
     - uses: actions/checkout@v4
@@ -27,11 +31,11 @@ jobs:
         --user
     - name: prepare python distribution
       run: |
-        mkdir build && cd build
-        cmake ../
-        cp packaging/pypi/* ../
-        mv python/hartree_fock/version.py ../python/hartree_fock/version.py
-        rm ../python/hartree_fock/version.py.in
+        git config --global --add safe.directory ${GITHUB_WORKSPACE}
+        cmake -S . -B build/
+        cp build/packaging/pypi/* ./
+        mv build/python/triqs_hartree_fock/version.py ./python/triqs_hartree_fock/version.py
+        rm ./python/triqs_hartree_fock/version.py.in
     - name: Build a binary wheel and a source tarball
       run: python3 -m build
     - name: Store the distribution packages