configure runner to chroot and mount special filesystems

buildbarn · Mar 1, 2024 · 5bf0080 · 5bf0080
1 parent d36981b
commit 5bf0080
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 2 deletions.
diff --git a/bare/config/runner.jsonnet b/bare/config/runner.jsonnet
@@ -2,10 +2,22 @@ local common = import 'common.libsonnet';
 
 {
   buildDirectoryPath: std.extVar('PWD') + '/worker/build',
-  chrootIntoInputRoot: true,
   global: common.globalWithDiagnosticsHttpServer(':9987'),
   grpcServers: [{
     listenPaths: ['worker/runner'],
     authenticationPolicy: { allow: {} },
   }],
+  chrootIntoInputRoot: true,
+  inputRootMounts: [
+    {
+      mountpoint: 'proc',
+      source: '/proc',
+      filesystemType: 'proc',
+    },
+    {
+      mountpoint: 'sys',
+      source: '/sys',
+      filesystemType: 'sysfs',
+    },
+  ],
 }
diff --git a/docker-compose/config/runner-ubuntu22-04.jsonnet b/docker-compose/config/runner-ubuntu22-04.jsonnet
@@ -2,10 +2,22 @@ local common = import 'common.libsonnet';
 
 {
   buildDirectoryPath: '/worker/build',
-  chrootIntoInputRoot: true,
   global: common.global,
   grpcServers: [{
     listenPaths: ['/worker/runner'],
     authenticationPolicy: { allow: {} },
   }],
+  chrootIntoInputRoot: true,
+  inputRootMounts: [
+    {
+      mountpoint: 'proc',
+      source: '/proc',
+      filesystemType: 'proc',
+    },
+    {
+      mountpoint: 'sys',
+      source: '/sys',
+      filesystemType: 'sysfs',
+    },
+  ],
 }