diff options
| author |  Benjamin Peterson <bp@benjamin.pe> | 2017-08-11 12:14:56 +0200 |
|---|---|---|
| committer |  Marcel Hlopko <hlopko@google.com> | 2017-08-11 15:42:51 +0200 |
| commit | 5398d80d62131609b94ad90f788da5179585f8c9 (patch) | |
| tree | b99e643c7a9515c7a5b7def49f438cf8cf66d48c /src/main/java/com/google/devtools/build/docgen/templates/attributes | |
| parent | 92d425fa73837bd53a5d5d82b73c6b33012f26c7 (diff) | |
Support executing as root in the linux sandbox.
linux-sandbox has a useful option -R, that runs the spawn as fake
root. However, it's not exposed to Bazel rules. Here, we do that via
the "requires-fakeroot" tag.
One possible usecase: In combination with "block-network",
"requires-fakeroot" makes it possible to integration test services
that insist on listening on privileged ports.
Unsurprisingly, this is incompatible with --sandbox_fake_username.
Change-Id: I9e8ab4d4abf0e45626e005ff21f73e6c17de0788
PiperOrigin-RevId: 164961019
Diffstat (limited to 'src/main/java/com/google/devtools/build/docgen/templates/attributes')
| -rw-r--r-- | src/main/java/com/google/devtools/build/docgen/templates/attributes/common/tags.html | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/main/java/com/google/devtools/build/docgen/templates/attributes/common/tags.html b/src/main/java/com/google/devtools/build/docgen/templates/attributes/common/tags.html index f6d1ea656b..67a87e3006 100644 --- a/src/main/java/com/google/devtools/build/docgen/templates/attributes/common/tags.html +++ b/src/main/java/com/google/devtools/build/docgen/templates/attributes/common/tags.html @@ -33,6 +33,11 @@ network from inside the sandbox. In this case, only communication with localhost is allowed. </li> + + <li><code>requires-fakeroot</code> runs the test or action as uid and gid 0 (i.e., the root + user). This is only supported on Linux. This tag takes precedence over the + <code class='flag'>--sandbox_fake_username</code> command-line option. + </li> </ul> <p> |