Skip to content

Commit

Permalink
CI: Disable seccomp policy for OpenMandriva Cooker distribution
Browse files Browse the repository at this point in the history
GitHub Actions service has not yet updated its container seccomp
policy to recognize a new clone3() syscall and OpenMandriva Cooker
upgraded glibc which utilizes it.

actions/runner-images#3812
  • Loading branch information
ppisar committed Sep 9, 2021
1 parent f2cffe8 commit 2d27036
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions .github/workflows/ci.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -139,7 +139,7 @@ jobs:
image: quay.io/fedora/fedora:${{ matrix.release }}-x86_64
# Disable seccomp until a container manager in GitHub recognizes
# clone3() syscall,
# <https://bugzilla.redhat.com/show_bug.cgi?id=1985499>.
# <https://github.com/actions/virtual-environments/issues/3812>.
options: --security-opt seccomp=unconfined

outputs:
Expand Down Expand Up @@ -200,7 +200,7 @@ jobs:
image: quay.io/fedora/fedora:${{ matrix.release }}-x86_64
# Disable seccomp until a container manager in GitHub recognizes
# clone3() syscall,
# <https://bugzilla.redhat.com/show_bug.cgi?id=1985499>.
# <https://github.com/actions/virtual-environments/issues/3812>.
options: --security-opt seccomp=unconfined

steps:
Expand Down Expand Up @@ -439,6 +439,10 @@ jobs:
continue-on-error: true
container:
image: docker.io/openmandriva/cooker
# Disable seccomp until a container manager in GitHub recognizes
# clone3() syscall,
# <https://github.com/actions/virtual-environments/issues/3812>.
options: --security-opt seccomp=unconfined
outputs:
meson_version: ${{ steps.scanbuild.outputs.available }}
steps:
Expand Down

0 comments on commit 2d27036

Please sign in to comment.