Add -daemon to restorer for newer platform

Signed-off-by: Natalie Arellano <narellano@vmware.com>

Author: Natalie Arellano

internal/build/lifecycle_execution.go

@@ -482,6 +482,8 @@ func (l *LifecycleExecution) Restore(ctx context.Context, buildCache Cache, kani
 		}
 	}
 
+	flagsOp := WithFlags(flags...)
+
 	// for auths
 	registryOp := NullOp()
 	if len(registryImages) > 0 {
@@ -492,7 +494,10 @@ func (l *LifecycleExecution) Restore(ctx context.Context, buildCache Cache, kani
 		registryOp = WithRegistryAccess(authConfig)
 	}
 
-	flagsOp := WithFlags(flags...)
+	dockerOp := NullOp()
+	if !l.opts.Publish && l.platformAPI.AtLeast("0.12") {
+		dockerOp = WithDaemonAccess(l.opts.DockerHost)
+	}
 
 	configProvider := NewPhaseConfigProvider(
 		"restorer",
@@ -507,10 +512,11 @@ func (l *LifecycleExecution) Restore(ctx context.Context, buildCache Cache, kani
 		WithNetwork(l.opts.Network),
 		If(l.hasExtensionsForRun(), WithPostContainerRunOperations(
 			CopyOutToMaybe(l.mountPaths.cnbDir(), l.tmpDir))), // FIXME: this is hacky; we should get the lifecycle binaries from the lifecycle image
-		flagsOp,
 		cacheBindOp,
-		registryOp,
+		dockerOp,
+		flagsOp,
 		kanikoCacheBindOp,
+		registryOp,
 	)
 
 	restore := phaseFactory.New(configProvider)

internal/build/lifecycle_execution_test.go

@@ -1838,6 +1838,17 @@ func testLifecycleExecution(t *testing.T, when spec.G, it spec.S) {
 				})
 			})
 		})
+
+		when("publish is false", func() {
+			when("platform >= 0.12", func() {
+				platformAPI = api.MustParse("0.12")
+
+				it("configures the phase with daemon access", func() {
+					h.AssertEq(t, configProvider.ContainerConfig().User, "root")
+					h.AssertSliceContains(t, configProvider.HostConfig().Binds, "/var/run/docker.sock:/var/run/docker.sock")
+				})
+			})
+		})
 	})
 
 	when("#Build", func() {