.github: run test in privilege container to allow PTRACE

ArduCustom · Feb 9, 2021 · 617ee37 · 617ee37
1 parent f4e6d63
commit 617ee37
Show file tree

Hide file tree

Showing 5 changed files with 18 additions and 6 deletions.
diff --git a/.github/workflows/test_sitl_copter.yml b/.github/workflows/test_sitl_copter.yml
@@ -58,7 +58,9 @@ jobs:
   autotest:
     needs: build  # don't try to launch the tests matrix if it doesn't build first, profit from caching for fast build
     runs-on: ubuntu-20.04
-    container: ardupilot/ardupilot-dev-base:latest
+    container:
+      image: ardupilot/ardupilot-dev-base:latest
+      options: --privileged --cap-add=SYS_PTRACE --security-opt apparmor=unconfined --security-opt seccomp=unconfined
     strategy:
       fail-fast: false  # don't cancel if a job from the matrix fails
       matrix:
@@ -124,7 +126,9 @@ jobs:
   build-gcc-heli:
     needs: build  # don't try to launch the tests matrix if it doesn't build first, profit from caching for fast build
     runs-on: ubuntu-20.04
-    container: ardupilot/ardupilot-dev-base:latest
+    container:
+      image: ardupilot/ardupilot-dev-base:latest
+      options: --privileged --cap-add=SYS_PTRACE --security-opt apparmor=unconfined --security-opt seccomp=unconfined
     steps:
       # git checkout the PR
       - uses: actions/checkout@v2

diff --git a/.github/workflows/test_sitl_plane.yml b/.github/workflows/test_sitl_plane.yml
@@ -58,7 +58,9 @@ jobs:
   autotest:
     needs: build  # don't try to launch the tests matrix if it doesn't build first, profit from caching for fast build
     runs-on: ubuntu-20.04
-    container: ardupilot/ardupilot-dev-base:latest
+    container:
+      image: ardupilot/ardupilot-dev-base:latest
+      options: --privileged --cap-add=SYS_PTRACE --security-opt apparmor=unconfined --security-opt seccomp=unconfined
     strategy:
       fail-fast: false  # don't cancel if a job from the matrix fails
       matrix:

diff --git a/.github/workflows/test_sitl_rover.yml b/.github/workflows/test_sitl_rover.yml
@@ -58,7 +58,9 @@ jobs:
   autotest:
     needs: build  # don't try to launch the tests matrix if it doesn't build first, profit from caching for fast build
     runs-on: ubuntu-20.04
-    container: ardupilot/ardupilot-dev-base:latest
+    container:
+      image: ardupilot/ardupilot-dev-base:latest
+      options: --privileged --cap-add=SYS_PTRACE --security-opt apparmor=unconfined --security-opt seccomp=unconfined
     strategy:
       fail-fast: false  # don't cancel if a job from the matrix fails
       matrix:

diff --git a/.github/workflows/test_sitl_sub.yml b/.github/workflows/test_sitl_sub.yml
@@ -58,7 +58,9 @@ jobs:
   autotest:
     needs: build  # don't try to launch the tests matrix if it doesn't build first, profit from caching for fast build
     runs-on: ubuntu-20.04
-    container: ardupilot/ardupilot-dev-base:latest
+    container:
+      image: ardupilot/ardupilot-dev-base:latest
+      options: --privileged --cap-add=SYS_PTRACE --security-opt apparmor=unconfined --security-opt seccomp=unconfined
     strategy:
       fail-fast: false  # don't cancel if a job from the matrix fails
       matrix:

diff --git a/.github/workflows/test_sitl_tracker.yml b/.github/workflows/test_sitl_tracker.yml
@@ -58,7 +58,9 @@ jobs:
   autotest:
     needs: build  # don't try to launch the tests matrix if it doesn't build first, profit from caching for fast build
     runs-on: ubuntu-20.04
-    container: ardupilot/ardupilot-dev-base:latest
+    container:
+      image: ardupilot/ardupilot-dev-base:latest
+      options: --privileged --cap-add=SYS_PTRACE --security-opt apparmor=unconfined --security-opt seccomp=unconfined
     strategy:
       fail-fast: false  # don't cancel if a job from the matrix fails
       matrix: