Sfoglia il codice sorgente

[clsi] add env var override for seccomp profile (#25894)

GitOrigin-RevId: 6ef9a5c1f9149147641abb9fe1798b1b41a14c05
Jakob Ackermann 1 anno fa
parent
commit
25577379fc
1 ha cambiato i file con 5 aggiunte e 3 eliminazioni
  1. 5 3
      services/clsi/config/settings.defaults.js

+ 5 - 3
services/clsi/config/settings.defaults.js

@@ -141,9 +141,11 @@ if ((process.env.DOCKER_RUNNER || process.env.SANDBOXED_COMPILES) === 'true') {
   let seccompProfilePath
   try {
     seccompProfilePath = Path.resolve(__dirname, '../seccomp/clsi-profile.json')
-    module.exports.clsi.docker.seccomp_profile = JSON.stringify(
-      JSON.parse(require('node:fs').readFileSync(seccompProfilePath))
-    )
+    module.exports.clsi.docker.seccomp_profile =
+      process.env.SECCOMP_PROFILE ||
+      JSON.stringify(
+        JSON.parse(require('node:fs').readFileSync(seccompProfilePath))
+      )
   } catch (error) {
     console.error(
       error,