docker-worker icon indicating copy to clipboard operation
docker-worker copied to clipboard

Add a capability disableSeccomp to disable the seccomp system call filter.

Open jschwartzentruber opened this issue 6 years ago • 5 comments

This is required to run rr inside a container, as described here: https://github.com/mozilla/rr/wiki/Docker

I haven't been able to run the test locally, mocha says: "pending". I'm hoping it'll be run in CI.

jschwartzentruber avatar Dec 11 '19 12:12 jschwartzentruber

No Taskcluster jobs started for this pull request

The `allowPullRequests` configuration for this repository (in `.taskcluster.yml` on the
default branch) does not allow starting tasks for this pull request.

It took a while but the tasks now run, it feels like disableSeccomp tasks are failing

walac avatar Jan 09 '20 13:01 walac

@djmitche another one:

diff --git a/test/dockerworker.js b/test/dockerworker.js
index 8ed1eef8..7ef763d6 100644
--- a/test/dockerworker.js
+++ b/test/dockerworker.js
@@ -64,7 +64,7 @@ class DockerWorker {
           global.asyncDump ? '--require /worker/src/lib/async-dump' : '',
           '/worker/src/bin/worker.js',
           '--host test',
-          '--worker-group', 'random-local-worker',
+          '--worker-group', 'docker-worker',
           '--worker-id', this.workerId,
           '--provisioner-id', this.provisionerId,
           '--worker-type', this.workerType,

walac avatar Jan 13 '20 13:01 walac

Not my PR, but I pushed that change :)

djmitche avatar Jan 13 '20 13:01 djmitche

Not my PR, but I pushed that change :)

Ops, I commented in the wrong PR, it actually applies to yours, sorry

walac avatar Jan 13 '20 14:01 walac