Re: [PATCH v4 03/10] github: adapt containerized jobs to be rootless
On Fri, Jan 10, 2025 at 12:34 PM Patrick Steinhardt <ps@pks.im> wrote:
Show 9 quoted lines
>
> The containerized jobs in GitHub Actions run as root, giving them
> special permissions to for example delete files even when the user
> shouldn't be able to due to file permissions. This limitation keeps us
> from using containerized jobs for most of our Ubuntu-based jobs as it
> causes a number of tests to fail.
>
> Adapt the jobs to create a separate user that executes the test suite.
> This follows similar infrastructure that we already have in GitLab CI.
Nit (not worth a reroll): It might help a bit to say something like:
"This requires installing the 'sudo' and 'shadow-utils' (for
`useradd`) packages."
Christian Couder <christian.couder@gmail.com>