From 4c1f7ca076ff042658c767a202e575e36a5e9d67 Mon Sep 17 00:00:00 2001 From: fbt Date: Mon, 22 Jun 2026 18:58:19 +0000 Subject: [PATCH] landlock Signed-off-by: fbt --- autobuilder/Containerfile | 6 +++++- autobuilder/build-container | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/autobuilder/Containerfile b/autobuilder/Containerfile index 4cc897e..9e4a3b4 100644 --- a/autobuilder/Containerfile +++ b/autobuilder/Containerfile @@ -5,7 +5,11 @@ COPY ./mirrorlist /etc/pacman.d/mirrorlist COPY gnupg /.gnupg COPY ./build /build +# No landlock in containers +RUN sed -ri 's/^#DisableSandboxFilesystem/DisableSandboxFilesystem/' /etc/pacman.conf + RUN pacman -Sy --noconfirm archlinux-keyring -RUN pacman -Suy --noconfirm base-devel nodejs git +RUN pacman -Rdd --noconfirm systemd-libs-systemd systemd-libs-udev +RUN pacman -Suy --noconfirm base-devel nodejs git systemd-libs RUN chmod 700 /.gnupg diff --git a/autobuilder/build-container b/autobuilder/build-container index dc8ede1..5635f3f 100755 --- a/autobuilder/build-container +++ b/autobuilder/build-container @@ -1,3 +1,3 @@ #!/usr/bin/env bash -podman build . -t 'spark:autobuilder' +podman build --no-cache . -t 'spark:autobuilder'