AlexIndustrial/mesa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci/container: remove S3_JWT_FILE when container_job_trampoline.sh exits

Browse Source 
The running container jobs scripts S3_JWT_FILE needs to be removed on
exit because the resulting image is committed and we don't want the auth
token to leak permanently in the fs.

Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/31093>
This commit is contained in:
Antonio Ospite
2024-12-19 20:17:31 +01:00
committed by Marge Bot
parent 88dfda7f0a
commit 669b7f881d
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitlab-ci/container/container_job_trampoline.sh
View File

@@ -19,4 +19,6 @@ CONTAINER_CI_JOB_NAME="$1"
eval "$S3_JWT_FILE_SCRIPT"
unset S3_JWT_FILE_SCRIPT
trap 'rm -f ${S3_JWT_FILE}' EXIT INT TERM
bash ".gitlab-ci/container/${CONTAINER_CI_JOB_NAME}.sh"

2
.gitlab-ci/image-tags.yml
View File

@@ -16,7 +16,7 @@ variables:
DEBIAN_BASE_TAG: "20241125-crosvm"
DEBIAN_X86_64_BUILD_IMAGE_PATH: "debian/x86_64_build"
DEBIAN_BUILD_TAG: "20241219-android"
DEBIAN_BUILD_TAG: "20241219-rm-jwt_file"
DEBIAN_X86_64_TEST_BASE_IMAGE: "debian/x86_64_test-base"
DEBIAN_ARM64_TEST_BASE_IMAGE: "debian/arm64_test-base"