shaba/ostree
1
0
Fork 0
mirror of https://github.com/ostreedev/ostree.git synced 2025-03-16 10:50:43 +03:00
Code Issues Projects Releases Wiki Activity

Merge pull request #2275 from cgwalters/ci-rework

Browse Source 
CI: run as non-root and add sanitizer build+check
This commit is contained in:
OpenShift Merge Robot 2021-02-03 09:58:42 -05:00 committed by GitHub
commit f0b619dfb9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
ci/build-check-sanitized.sh Executable file
View File

@ -0,0 +1,12 @@
#!/usr/bin/bash
# Build with ASAN and UBSAN + unit tests.
set -xeuo pipefail
dn=$(dirname $0)
. ${dn}/libbuild.sh
export CFLAGS='-fsanitize=address -fsanitize=undefined -fsanitize-undefined-trap-on-error'
# We leak global state in a few places, fixing that is hard.
export ASAN_OPTIONS='detect_leaks=0'
${dn}/build.sh
make check

2
ci/installdeps.sh
View File

@ -7,7 +7,7 @@ set -xeuo pipefail
# cosa buildroot container
# https://github.com/coreos/coreos-assembler/pull/730
# And using `yum` at all means we can flake on fetching rpm metadata
if [ -n "${SKIP_INSTALLDEPS:-}" ]; then
if [ -n "${SKIP_INSTALLDEPS:-}" ] || test "$(id -u)" != 0; then
exit 0
fi