mirror of
https://git.yoctoproject.org/meta-raspberrypi
synced 2026-07-16 15:56:57 +00:00
Leon Anavi
a56d87d4e6
Upgrade to Ubuntu 22.04 because it is compatible with the Yocto Project release Walnascar and provides a newer Python version: - Add --ulimit "nofile=1024:1048576" to yocto-builds.yml. - Increase vm.max_map_count. - Add --security-opt apparmor=unconfined to docker cmdline. - Run docker without the default seccomp profile This commit is backport from branch master to Scarthgap because Ubuntu 20.04 reached its end of life (EOL) on May 31, 2025. Yocto release Scarthgap also supports Ubuntu 22.04. This work was sponsored by GOVCERT.LU. Suggested-by: Martin Steegmanns <martin.steegmanns@govcert.etat.lu> Suggested-by: Stu Westerman @stu-spp Suggested-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
# SPDX-FileCopyrightText: Andrei Gherzan <andrei.gherzan@huawei.com>
|
|
#
|
|
# SPDX-License-Identifier: MIT
|
|
|
|
name: Compliance
|
|
|
|
on:
|
|
pull_request:
|
|
|
|
jobs:
|
|
dco:
|
|
name: DCO
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout the code
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Build a temporary DCO image
|
|
uses: ./.github/actions/docker-build
|
|
with:
|
|
docker_image: dco-check
|
|
id: ${{ github.event.number }}
|
|
- name: Do DCO check
|
|
run: |
|
|
docker run --rm --security-opt apparmor=unconfined \
|
|
--security-opt seccomp=unconfined \
|
|
-v "$GITHUB_WORKSPACE:/work:ro" \
|
|
--env "BASE_REF=$GITHUB_BASE_REF" \
|
|
"dco-check-${{ github.event.number }}"
|
|
- name: Cleanup temporary docker image
|
|
uses: ./.github/actions/docker-clean-image
|
|
with:
|
|
docker_image: dco-check-${{ github.event.number }}
|
|
if: always()
|
|
- name: Cleanup dangling docker images
|
|
uses: ./.github/actions/docker-clean-dangling
|
|
if: always()
|
|
reuse:
|
|
name: reuse
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout the code
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Do reuse check
|
|
continue-on-error: true
|
|
uses: fsfe/reuse-action@v1
|