taler-deployment

commit 99dd7b8995769b7d225bca9543fee0bce8ca9875
parent 5c0c85e20c074daab41a64bfd97b17814542c3fb
Author: Devan Carpenter <devan@taler.net>
Date:   Mon,  1 Apr 2024 11:45:50 -0400

buildbot: add volume mounts for ssh keys to podman

Diffstat:
M
buildbot/master.cfg
 | 
4
++++

1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/buildbot/master.cfg b/buildbot/master.cfg
@@ -207,6 +207,8 @@ def container_add_step(HALT_ON_FAILURE,
                                            "--env", util.Interpolate("CI_GIT_BRANCH=%(src::branch)s"),
                                            "--volume", f"{WORK_DIR}:/workdir",
                                            "--volume", "/home/container-worker/container_artifacts:/artifacts",
+                                           "--volume", "/home/container-worker/mounted_files/ci_container_id_ed25519:/root/.ssh/id_ed25519:ro",
+                                           "--volume", "/home/container-worker/mounted_files/container_known_hosts:/root/.ssh/known_hosts:ro",
                                            "--workdir", "/workdir",
                                            CONTAINER_NAME, jobCmd],
                                   logname='run inside container',
@@ -232,6 +234,8 @@ def container_add_step(HALT_ON_FAILURE,
                                            "--volume", f"{WORK_DIR}:/workdir",
                                            "--volume", "/home/container-worker/container_artifacts:/artifacts",
                                            "--volume", f"/run/user/{pwd.getpwnam('container-worker').pw_uid}/podman/podman.sock:/run/podman/podman.sock",
+                                           "--volume", "/home/container-worker/mounted_files/ci_container_id_ed25519:/root/.ssh/id_ed25519:ro",
+                                           "--volume", "/home/container-worker/mounted_files/container_known_hosts:/root/.ssh/known_hosts:ro",
                                            "--security-opt", "label=disable",
                                            "--workdir", "/workdir",
                                            CONTAINER_NAME, jobCmd],