Skip to content

Conversation

@securitykernel
Copy link
Contributor

I recently updated a self-hosted GitLab Runner from Ubuntu 20.04 to 22.04 and noticed that all fuzzing jobs failed because cut -c9- < /proc/1/cpuset which we use to populate CFL_CONTAINER_ID returns an empty string.

Instead, use docker container labels set by GitLab Runner to get the running container ID. Solution found via Stack Overflow.

Also harmonizes case sensitivity for all mentioning of GitLab.

@jonathanmetzman
Copy link
Collaborator

Will this work for non-self-hosted runners?

@jonathanmetzman
Copy link
Collaborator

Thanks for this btw

@securitykernel
Copy link
Contributor Author

As far as I know the only supported mode with GitLab.com SaaS Runners is Docker-in-Docker. These runners don't provide access to docker.sock other than with Docker-in-Docker, as can be seen in https://gitlab.com/securitykernel/cflite-example.

@securitykernel
Copy link
Contributor Author

Maybe I was not clear enough here. The change is not relevant for non -self hosted runners, because the variable is not used there anyway.

Copy link
Collaborator

@jonathanmetzman jonathanmetzman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@jonathanmetzman jonathanmetzman merged commit e647b6c into google:main Apr 27, 2023
@jonathanmetzman
Copy link
Collaborator

Sorry for not merging this earlier.

@jonathanmetzman
Copy link
Collaborator

jonathanmetzman commented Apr 27, 2023

Maybe I was not clear enough here. The change is not relevant for non -self hosted runners, because the variable is not used there anyway.

Ah maybe I shouldn't have merged this...might revert.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants