Re: [RFC][PATCH] ci: Build in kas docker image

[Alexander Smirnov <asmirnov@ilbers.de>]

On 03/02/2018 03:43 PM, Jan Kiszka wrote:
> On 2018-03-02 13:37, Alexander Smirnov wrote:
>> On 02/26/2018 04:43 PM, Jan Kiszka wrote:
>>> From: Jan Kiszka <jan.kiszka@siemens.com>
>>>
>>> This models a gitlab CI build via the kas-isar docker image. That image
>>> provides a stable execution environment, resolving all currently
>>> required host-side dependencies for us.
>>>
>>> Change the build stage to run the CI tests directly, instead of falling
>>> back to the - by now - incompatible ci_build.sh script.
>>>
>>> Drop artifact deployment from the public CI setup for now. They were
>>> incomplete anyway, and they should be accompanied with an expiry date if
>>> they should be reintroduced.
>>>
>>
>> What is the way for me to test this change?
> 
> Set up a runner with special privileges for the docker containers,
> namely "--cap-add=SYS_ADMIN --cap-add=MKNOD --privileged --device
> $(/sbin/losetup -f)". Should be
> 
>        docker_privileged: True
>        docker_cap_add: [ "MKNOD","SYS_ADMIN" ]
>        docker_devices: [ "$(/sbin/losetup -f)" ]
> 
> in the CI runner syntax. We are currently playing with this, but the
> whole thing still needs VM encapsulation per job because, well, it runs
> with super-foo. Can send you the code.siemens.com links offlist if you
> are interested.

Sure, please send it. Apart from this, I have no other objections, do 
you still consider it as RFC, or I could apply it?

Alex