Use chroot in the fuse runner

Now the build fails. This is step two of three to verify the solution to: buildbarn/bb-remote-execution#115
stagnation · Sep 12, 2023 · 307562e · 307562e
1 parent be527c2
commit 307562e
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 1 deletion.
diff --git a/bare/config/runner.jsonnet b/bare/config/runner.jsonnet
@@ -2,6 +2,7 @@ local common = import 'common.libsonnet';
 
 {
   buildDirectoryPath: std.extVar('PWD') + '/worker/build',
+  chrootIntoInputRoot: true,
   global: common.globalWithDiagnosticsHttpServer(':9987'),
   grpcServers: [{
     listenPaths: ['worker/runner'],

diff --git a/bare/config/worker.jsonnet b/bare/config/worker.jsonnet
@@ -15,8 +15,16 @@ local common = import 'common.libsonnet';
       cacheReplacementPolicy: 'LEAST_RECENTLY_USED',
     },
     runners: [{
-      # https://github.com/grpc/grpc/blob/master/doc/naming.md
+      // https://github.com/grpc/grpc/blob/master/doc/naming.md
       endpoint: { address: 'unix:worker/runner' },
+      inputRootCharacterDeviceNodes: [
+        'full',
+        'null',
+        'random',
+        'tty',
+        'urandom',
+        'zero',
+      ],
       concurrency: 8,
       platform: {},
       workerId: {

diff --git a/docker-compose/config/runner-ubuntu22-04.jsonnet b/docker-compose/config/runner-ubuntu22-04.jsonnet
@@ -2,6 +2,7 @@ local common = import 'common.libsonnet';
 
 {
   buildDirectoryPath: '/worker/build',
+  chrootIntoInputRoot: true,
   global: common.global,
   grpcServers: [{
     listenPaths: ['/worker/runner'],

diff --git a/docker-compose/config/worker-fuse-ubuntu22-04.jsonnet b/docker-compose/config/worker-fuse-ubuntu22-04.jsonnet
@@ -67,6 +67,14 @@ local common = import 'common.libsonnet';
       endpoint: { address: 'unix:///worker/runner' },
       concurrency: 8,
       instanceNamePrefix: 'fuse',
+      inputRootCharacterDeviceNodes: [
+        'full',
+        'null',
+        'random',
+        'tty',
+        'urandom',
+        'zero',
+      ],
       platform: {
         properties: [
           { name: 'OSFamily', value: 'linux' },