Force the CI to run docker as readonly, disable templateflow auto u…

…pdate on import (#29)

* full_test see force the CI to run docker as readonly

* full_test remove -ti

* full_test autoupdate

.github/workflows/test.yml

@@ -193,7 +193,7 @@ jobs:
     - name: Test the Docker image
       run: |
         docker load -i ${HOME}/docker/image.tar
-        docker run --rm \
+        docker run --rm --read-only \
           -v /home/runner/work/giga_auto_qc/giga_auto_qc/giga_auto_qc/data/test_data:/test_data \
           -v ./outputs:/outputs \
           -v ./outputs/working_dir:/work \

Dockerfile

@@ -10,7 +10,10 @@ RUN apt-get update -qq && \
 ARG TEMPLATEFLOW_HOME="/templateflow"
 
 RUN pip3 install templateflow==0.8.1 && \
-    mkdir -p /code && mkdir -p /templateflow
+    mkdir -p /code && mkdir -p ${TEMPLATEFLOW_HOME}
+
+ENV TEMPLATEFLOW_HOME=${TEMPLATEFLOW_HOME}
+ENV TEMPLATEFLOW_AUTOUPDATE=off
 
 WORKDIR /code
 
@@ -20,6 +23,4 @@ COPY [".", "/code"]
 
 RUN pip3 install -e .
 
-ENV TEMPLATEFLOW_HOME=${TEMPLATEFLOW_HOME}
-
 ENTRYPOINT ["/usr/local/bin/giga_auto_qc"]