Mount the sytest working copy read-only (#16)

... to stop people doing things that will make it crap over my working copy cf matrix-org/sytest#748
matrix-org · Nov 29, 2019 · 9480f08 · 9480f08
1 parent 63ca7bc
commit 9480f08
Showing 1 changed file with 26 additions and 7 deletions.
diff --git a/sytest/pipeline.yml b/sytest/pipeline.yml
@@ -17,7 +17,12 @@ steps:
           shell: ["-x", "-c"]
           init: false
           mount-buildkite-agent: false
-          volumes: ["./logs:/logs"]
+          # we mount the working copy read-only to make sure that it doesn't
+          # modify local files (cf https://github.com/matrix-org/sytest/pull/748)
+          mount-checkout: false
+          volumes:
+            - "./logs:/logs"
+            - ".:/sytest:ro"
       - artifacts#v1.2.0:
           upload: [ "logs/**/*.log", "logs/**/*.log.*", "logs/results.tap" ]
       - matrix-org/annotate:
@@ -50,7 +55,10 @@ steps:
           shell: ["-x", "-c"]
           init: false
           mount-buildkite-agent: false
-          volumes: ["./logs:/logs"]
+          mount-checkout: false
+          volumes:
+            - "./logs:/logs"
+            - ".:/sytest:ro"
       - artifacts#v1.2.0:
           upload: [ "logs/**/*.log", "logs/**/*.log.*", "logs/results.tap" ]
       - matrix-org/annotate:
@@ -86,7 +94,10 @@ steps:
           shell: ["-x", "-c"]
           init: false
           mount-buildkite-agent: false
-          volumes: ["./logs:/logs"]
+          mount-checkout: false
+          volumes:
+            - "./logs:/logs"
+            - ".:/sytest:ro"
       - artifacts#v1.2.0:
           upload: [ "logs/**/*.log", "logs/**/*.log.*", "logs/results.tap" ]
       - matrix-org/annotate:
@@ -119,7 +130,10 @@ steps:
           shell: ["-x", "-c"]
           init: false
           mount-buildkite-agent: false
-          volumes: ["./logs:/logs"]
+          mount-checkout: false
+          volumes:
+            - "./logs:/logs"
+            - ".:/sytest:ro"
       - artifacts#v1.2.0:
           upload: [ "logs/**/*.log", "logs/**/*.log.*", "logs/results.tap" ]
       - matrix-org/annotate:
@@ -155,7 +169,10 @@ steps:
           shell: ["-x", "-c"]
           init: false
           mount-buildkite-agent: false
-          volumes: ["./logs:/logs"]
+          mount-checkout: false
+          volumes:
+            - "./logs:/logs"
+            - ".:/sytest:ro"
       - artifacts#v1.2.0:
           upload: [ "logs/**/*.log", "logs/**/*.log.*", "logs/results.tap" ]
       - matrix-org/annotate:
@@ -187,9 +204,11 @@ steps:
           entrypoint: '/bin/sh'
           shell: ["-x", "-c"]
           init: false
-          debug: true
           mount-buildkite-agent: false
-          volumes: ["./logs:/logs"]
+          mount-checkout: false
+          volumes:
+            - "./logs:/logs"
+            - ".:/sytest:ro"
       - artifacts#v1.2.0:
           upload: [ "logs/**/*.log", "logs/**/*.log.*", "logs/results.tap" ]
     soft_fail: