mirror of
https://github.com/ansible-collections/community.general.git
synced 2026-05-07 22:02:50 +00:00
Add seccomp support to ansible-test.
This commit is contained in:
@@ -11,6 +11,7 @@ from lib.util import (
|
||||
docker_qualify_image,
|
||||
find_python,
|
||||
generate_pip_command,
|
||||
get_docker_completion,
|
||||
)
|
||||
|
||||
from lib.metadata import (
|
||||
@@ -46,8 +47,12 @@ class EnvironmentConfig(CommonConfig):
|
||||
self.docker_privileged = args.docker_privileged if 'docker_privileged' in args else False # type: bool
|
||||
self.docker_pull = args.docker_pull if 'docker_pull' in args else False # type: bool
|
||||
self.docker_keep_git = args.docker_keep_git if 'docker_keep_git' in args else False # type: bool
|
||||
self.docker_seccomp = args.docker_seccomp if 'docker_seccomp' in args else None # type: str
|
||||
self.docker_memory = args.docker_memory if 'docker_memory' in args else None
|
||||
|
||||
if self.docker_seccomp is None:
|
||||
self.docker_seccomp = get_docker_completion().get(self.docker_raw, {}).get('seccomp', 'default')
|
||||
|
||||
self.tox_sitepackages = args.tox_sitepackages # type: bool
|
||||
|
||||
self.remote_stage = args.remote_stage # type: str
|
||||
|
||||
@@ -239,6 +239,9 @@ def delegate_docker(args, exclude, require, integration_targets):
|
||||
|
||||
docker_socket = '/var/run/docker.sock'
|
||||
|
||||
if args.docker_seccomp != 'default':
|
||||
test_options += ['--security-opt', 'seccomp=%s' % args.docker_seccomp]
|
||||
|
||||
if os.path.exists(docker_socket):
|
||||
test_options += ['--volume', '%s:%s' % (docker_socket, docker_socket)]
|
||||
|
||||
|
||||
Reference in New Issue
Block a user