mirror of
https://github.com/swift-server/async-http-client.git
synced 2026-06-02 07:37:34 +00:00
tomer doronandGitHub
a49510c9f1
motivation: more secured ci setup changes: * enable :z selinux flag on bind mounts so we can enable selinux on ci * drop potentially exploitable capabilities from docker-compose * create a 16.04 docker-compose setup so we can run tsan in ci (broken on 18.04)
42 lines
899 B
YAML
42 lines
899 B
YAML
# this file is not designed to be run directly
|
|
# instead, use the docker-compose.<os>.<swift> files
|
|
# eg docker-compose -f docker/docker-compose.yaml -f docker/docker-compose.1804.50.yaml run test
|
|
version: "3"
|
|
|
|
services:
|
|
|
|
runtime-setup:
|
|
image: async-http-client:default
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
|
|
common: &common
|
|
image: async-http-client:default
|
|
depends_on: [runtime-setup]
|
|
volumes:
|
|
- ~/.ssh:/root/.ssh
|
|
- ..:/code:z
|
|
working_dir: /code
|
|
cap_drop:
|
|
- CAP_NET_RAW
|
|
- CAP_NET_BIND_SERVICE
|
|
|
|
sanity:
|
|
<<: *common
|
|
command: /bin/bash -xcl "./scripts/sanity.sh"
|
|
|
|
test:
|
|
<<: *common
|
|
command: /bin/bash -xcl "swift test -Xswiftc -warnings-as-errors $${SANITIZER_ARG-}"
|
|
|
|
# util
|
|
|
|
shell:
|
|
<<: *common
|
|
entrypoint: /bin/bash
|
|
|
|
docs:
|
|
<<: *common
|
|
command: /bin/bash -cl "./scripts/generate_docs.sh"
|