sudo runuser to run as runner:runner rather than runner:docker #43
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Bazel CI | |
on: | |
push: | |
branches: [ "main" ] | |
paths-ignore: | |
- README.md | |
jobs: | |
build: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read | |
packages: write | |
steps: | |
- name: Bazel Group | |
run: | | |
id -a | |
getent group 1001 | |
- uses: actions/checkout@v3 | |
- uses: docker/login-action@v2 | |
with: | |
registry: ghcr.io | |
username: ${{ github.actor }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
- uses: docker/setup-buildx-action@v2 | |
- uses: docker/bake-action@v3 | |
with: | |
push: true | |
workdir: executors | |
set: | | |
*.cache-from=type=gha | |
*.cache-to=type=gha,mode=max | |
- name: Bazel Home RC | |
run: | | |
echo "build --disk_cache=~/.cache/bazel.disk" >> ~/.bazelrc | |
echo "test --test_output=all" >> ~/.bazelrc | |
- uses: actions/cache@v3 | |
with: | |
path: ${{github.workspace}}/.cache/bazel.disk | |
key: bazel | |
- name: Bazel Build | |
run: sudo runuser -u runner -g runner -G docker bazel build --config docker hellos tars rpms debs | |
- name: Bazel Host Tests | |
run: sudo runuser -u runner -g runner -G docker bazel test --config docker --strategy=TestRunner=sandboxed host-{hellos,tars}-test # We won't test the RPM and DEB tests on the host as they actually install the package. | |
- name: Bazel Platform Tests | |
run: sudo runuser -u runner -g runner -G docker bazel test --config docker --strategy=TestRunner=docker platform-{hello,tar,rpm,deb}-test-suite | |
- name: Work around https://github.com/actions/upload-artifact/issues/92 | |
run: echo "bazel_out=$(sudo runuser -u runner -g runner -G docker bazel info output_path)" >> $GITHUB_ENV | |
- run: sudo runuser -u runner -g runner -G docker bazel shutdown | |
- uses: actions/upload-artifact@v3 | |
with: | |
name: test-results | |
path: ${{env.bazel_out}}/*/testlogs/** |