116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
|
# of delegating to it with "$(MAKE) reconfig": having children running
# around interfering makes this failure mode even worse.
Makefile: @srcdir@/Makefile.in $(SRCDIR)/main.mk @AUTODEPS@
@AUTOREMAKE@
touch @builddir@/Makefile
# Container stuff
container-image: @srcdir@/Dockerfile
docker build -t fossil:@FOSSIL_CI_PFX@ $(DBFLAGS) @srcdir@
container-run: container-image
docker run \
--name fossil-@FOSSIL_CI_PFX@ \
--cap-drop AUDIT_WRITE \
--cap-drop CHOWN \
--cap-drop FSETID \
--cap-drop KILL \
--cap-drop MKNOD \
--cap-drop NET_BIND_SERVICE \
--cap-drop NET_RAW \
--cap-drop SETFCAP \
--cap-drop SETPCAP \
--detach --publish 8080:8080 \
$(DRFLAGS) fossil:@FOSSIL_CI_PFX@
docker container logs fossil-@FOSSIL_CI_PFX@
@srcdir@/Dockerfile: @srcdir@/Dockerfile.in @srcdir@/manifest.uuid
@AUTOREMAKE@
|
|
>
|
>
>
<
<
<
<
|
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
# of delegating to it with "$(MAKE) reconfig": having children running
# around interfering makes this failure mode even worse.
Makefile: @srcdir@/Makefile.in $(SRCDIR)/main.mk @AUTODEPS@
@AUTOREMAKE@
touch @builddir@/Makefile
# Container stuff
container-image:
docker build \
--tag fossil:@FOSSIL_CI_PFX@ \
--build-arg FSLVER=@FOSSIL_CI_PFX@ \
$(DBFLAGS) @srcdir@
container-run: container-image
docker run \
--name fossil-@FOSSIL_CI_PFX@ \
--cap-drop AUDIT_WRITE \
--cap-drop CHOWN \
--cap-drop FSETID \
--cap-drop KILL \
--cap-drop MKNOD \
--cap-drop NET_BIND_SERVICE \
--cap-drop NET_RAW \
--cap-drop SETFCAP \
--cap-drop SETPCAP \
--detach --publish 8080:8080 \
$(DRFLAGS) fossil:@FOSSIL_CI_PFX@
docker container logs fossil-@FOSSIL_CI_PFX@
|