lfg2025/archy
1
0
Fork 0
Code Issues 11 Pull Requests Actions Packages Projects Releases 12 Wiki Activity

Bind isolated test checkout read-only inside private tmp namespace

Browse Source
This commit is contained in:
archipelago
2026-10-08 14:35:53 -04:00
parent 7fe6335583
commit 1b0b119a09
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/test-backend-isolated.sh
+1
View File
@@ -42,6 +42,7 @@ PY
unit="archy-isolated-tests-$(date +%s)-$$" unit="archy-isolated-tests-$(date +%s)-$$"
sudo -n systemd-run --unit="$unit" --wait --pipe --collect \ sudo -n systemd-run --unit="$unit" --wait --pipe --collect \
--property="WorkingDirectory=$REPO/core" \ --property="WorkingDirectory=$REPO/core" \
--property="BindReadOnlyPaths=$REPO" \
--property=PrivateNetwork=yes --property=PrivateTmp=yes --property=PrivateDevices=yes \ --property=PrivateNetwork=yes --property=PrivateTmp=yes --property=PrivateDevices=yes \
--property=ProtectSystem=strict --property=ProtectHome=read-only \ --property=ProtectSystem=strict --property=ProtectHome=read-only \
--property=NoNewPrivileges=yes \ --property=NoNewPrivileges=yes \