mirrors/meta-raspberrypi
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-raspberrypi synced 2026-07-26 07:06:59 +00:00
Code Issues Projects Releases Wiki Activity

.github/workflows: Disable apparmor

Browse Source 
Add --security-opt apparmor=unconfined to docker cmdline.

Suggested-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
This commit is contained in:
Leon Anavi
2025-05-02 13:09:45 +03:00
committed by Khem Raj
parent 48c571a537
commit 2aa34651a7
3 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/compliance.yml
+2 -1
View File
@@ -23,7 +23,8 @@ jobs:
id: ${{ github.event.number }} id: ${{ github.event.number }}
- name: Do DCO check - name: Do DCO check
run: | run: |
docker run --rm -v "$GITHUB_WORKSPACE:/work:ro" \ docker run --rm --security-opt apparmor=unconfined \
-v "$GITHUB_WORKSPACE:/work:ro" \
--env "BASE_REF=$GITHUB_BASE_REF" \ --env "BASE_REF=$GITHUB_BASE_REF" \
"dco-check-${{ github.event.number }}" "dco-check-${{ github.event.number }}"
- name: Cleanup temporary docker image - name: Cleanup temporary docker image
.github/workflows/yocto-builds.yml
+1 -1
View File
@@ -66,7 +66,7 @@ jobs:
if: steps.changed-files-specific.outputs.any_changed == 'true' if: steps.changed-files-specific.outputs.any_changed == 'true'
- name: Build the image - name: Build the image
run: | run: |
docker run --rm \ docker run --rm --security-opt apparmor=unconfined \
-v "$GITHUB_WORKSPACE:/work:ro" \ -v "$GITHUB_WORKSPACE:/work:ro" \
-v "$DL_DIR:$DL_DIR:rw" \ -v "$DL_DIR:$DL_DIR:rw" \
-v "$SSTATE_DIR:$SSTATE_DIR:rw" \ -v "$SSTATE_DIR:$SSTATE_DIR:rw" \
.github/workflows/yocto-layer.yml
+2 -1
View File
@@ -42,7 +42,8 @@ jobs:
if: steps.changed-files-specific.outputs.any_changed == 'true' if: steps.changed-files-specific.outputs.any_changed == 'true'
- name: Run yocto-check-layer - name: Run yocto-check-layer
run: | run: |
docker run --rm -v "$GITHUB_WORKSPACE:/work:ro" \ docker run --rm --security-opt apparmor=unconfined \
-v "$GITHUB_WORKSPACE:/work:ro" \
--env "BASE_REF=$GITHUB_BASE_REF" \ --env "BASE_REF=$GITHUB_BASE_REF" \
"yocto-builder-${{ github.event.number }}" \ "yocto-builder-${{ github.event.number }}" \
/entrypoint-yocto-check-layer.sh /entrypoint-yocto-check-layer.sh