Re: [RFC][PATCH] ci: Build in kas docker image

[Jan Kiszka <jan.kiszka@siemens.com>]

On 2018-03-02 13:37, Alexander Smirnov wrote:
> On 02/26/2018 04:43 PM, Jan Kiszka wrote:
>> From: Jan Kiszka <jan.kiszka@siemens.com>
>>
>> This models a gitlab CI build via the kas-isar docker image. That image
>> provides a stable execution environment, resolving all currently
>> required host-side dependencies for us.
>>
>> Change the build stage to run the CI tests directly, instead of falling
>> back to the - by now - incompatible ci_build.sh script.
>>
>> Drop artifact deployment from the public CI setup for now. They were
>> incomplete anyway, and they should be accompanied with an expiry date if
>> they should be reintroduced.
>>
> 
> What is the way for me to test this change?

Set up a runner with special privileges for the docker containers,
namely "--cap-add=SYS_ADMIN --cap-add=MKNOD --privileged --device
$(/sbin/losetup -f)". Should be

      docker_privileged: True
      docker_cap_add: [ "MKNOD","SYS_ADMIN" ]
      docker_devices: [ "$(/sbin/losetup -f)" ]

in the CI runner syntax. We are currently playing with this, but the
whole thing still needs VM encapsulation per job because, well, it runs
with super-foo. Can send you the code.siemens.com links offlist if you
are interested.

Jan

-- 
Siemens AG, Corporate Technology, CT RDA IOT SES-DE
Corporate Competence Center Embedded Linux