Skip to content

ITEP-21261 Mount compiler container's root file system as read-only #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 9 commits into
base: main
Choose a base branch
from
Open

ITEP-21261 Mount compiler container's root file system as read-only #17

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
0e6fd43
Mount compiler container's root file system as read-only
Rashika-Rajaraman Apr 3, 2025
831316a
Merge branch 'main' into ITEP-21261
Rashika-Rajaraman Apr 4, 2025
400e264
Merge branch 'main' into ITEP-21261
dmytroye Apr 4, 2025
182329a
Merge branch 'main' into ITEP-21261
Rashika-Rajaraman Apr 7, 2025
6d7c7ef
Debug
Rashika-Rajaraman Apr 3, 2025
03d0325
Debug
Rashika-Rajaraman Apr 3, 2025
e5d51af
Fix jq dependency
Rashika-Rajaraman Apr 7, 2025
7b11b3d
Revert script file changes
Rashika-Rajaraman Apr 7, 2025
729a4c7
Merge branch 'main' into ITEP-21261
zdw May 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions nexus/compiler/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,11 +50,17 @@ define run_in_container
docker run \
--volume $(realpath .)/..:/go/src/github.com/vmware-tanzu/graph-framework-for-microservices/ \
--volume ~/.ssh:/root/.ssh \
--volume /tmp:/tmp \
--volume /go/pkg/mod:/go/pkg/mod \
--volume /root/.cache/go-build:/root/.cache/go-build \
--network=host \
--workdir ${PKG_NAME} \
-e http_proxy=$(HTTP_PROXY) \
-e https_proxy=$(HTTPS_PROXY) \
-e GOCACHE=/tmp/go-build-cache \
-e GOMODCACHE=/tmp/go-mod-cache \
--user $(shell id -u):$(shell id -g) \
--read-only \
"${BUILDER_DOCKER_TAG}" /bin/bash -c 'chown -R $(shell id -u) .; ${1}'
endef
else
Expand Down
2 changes: 1 addition & 1 deletion nexus/compiler/builder/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ RUN git config --global --add safe.directory '*' \
make=4.3-4.1 \
coreutils=9.1-1 \
openssh-client=1:9.2p1-2+deb12u5 \
&& curl -o /usr/local/bin/jq https://github.com/stedolan/jq/releases/latest/download/jq-linux-amd64 \
&& curl -L -o /usr/local/bin/jq https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64 \
&& chmod +x /usr/local/bin/jq \
&& go install github.com/onsi/ginkgo/[email protected] \
&& go install github.com/onsi/gomega/[email protected] \
Expand Down
Loading