MIRRORS/meta-raspberrypi
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-raspberrypi.git synced 2025-07-19 12:59:03 +02:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

.github/workflows: Disable apparmor

Browse Source 
Add --security-opt apparmor=unconfined to docker cmdline.

Suggested-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
This commit is contained in:
Leon Anavi 2025-05-02 13:09:45 +03:00 committed by Khem Raj
parent 48c571a537
commit 2aa34651a7
3 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/compliance.yml vendored
View File

@ -23,7 +23,8 @@ jobs:
id: ${{ github.event.number }} id: ${{ github.event.number }}
- name: Do DCO check - name: Do DCO check
run: | run: |
docker run --rm -v "$GITHUB_WORKSPACE:/work:ro" \ docker run --rm --security-opt apparmor=unconfined \
-v "$GITHUB_WORKSPACE:/work:ro" \
--env "BASE_REF=$GITHUB_BASE_REF" \ --env "BASE_REF=$GITHUB_BASE_REF" \
"dco-check-${{ github.event.number }}" "dco-check-${{ github.event.number }}"
- name: Cleanup temporary docker image - name: Cleanup temporary docker image

2
.github/workflows/yocto-builds.yml vendored
View File

@ -66,7 +66,7 @@ jobs:
if: steps.changed-files-specific.outputs.any_changed == 'true' if: steps.changed-files-specific.outputs.any_changed == 'true'
- name: Build the image - name: Build the image
run: | run: |
docker run --rm \ docker run --rm --security-opt apparmor=unconfined \
-v "$GITHUB_WORKSPACE:/work:ro" \ -v "$GITHUB_WORKSPACE:/work:ro" \
-v "$DL_DIR:$DL_DIR:rw" \ -v "$DL_DIR:$DL_DIR:rw" \
-v "$SSTATE_DIR:$SSTATE_DIR:rw" \ -v "$SSTATE_DIR:$SSTATE_DIR:rw" \

3
.github/workflows/yocto-layer.yml vendored
View File

@ -42,7 +42,8 @@ jobs:
if: steps.changed-files-specific.outputs.any_changed == 'true' if: steps.changed-files-specific.outputs.any_changed == 'true'
- name: Run yocto-check-layer - name: Run yocto-check-layer
run: | run: |
docker run --rm -v "$GITHUB_WORKSPACE:/work:ro" \ docker run --rm --security-opt apparmor=unconfined \
-v "$GITHUB_WORKSPACE:/work:ro" \
--env "BASE_REF=$GITHUB_BASE_REF" \ --env "BASE_REF=$GITHUB_BASE_REF" \
"yocto-builder-${{ github.event.number }}" \ "yocto-builder-${{ github.event.number }}" \
/entrypoint-yocto-check-layer.sh /entrypoint-yocto-check-layer.sh