| commit | 44aef15d6ef65c2296b13330d230308075f8df37 | [log] [tgz] |
|---|---|---|
| author | Tristan Cacqueray <tdecacqu@redhat.com> | Thu Jun 15 06:00:12 2017 +0000 |
| committer | Tristan Cacqueray <tdecacqu@redhat.com> | Sat Jun 17 02:43:19 2017 +0000 |
| tree | ede8c9ebe54bb93479a6a61991b5c7dd08509659 | |
| parent | 2438860823412bc7d38cdf02550ee5a62d4bb13f [diff] |
executor: run trusted playbook in a bubblewrap This change renames untrusted_wrapper to execution_wrapper and uses bubblewrap for both trusted and untrusted playbooks by default. This change adds new options to the zuul.conf executor section to let operators define what directories to mount ro or rw for both context: * trusted_ro_dirs/trusted_rw_dirs, and * untrusted_ro_dirs/untrusted_rw_dirs Change-Id: I9a8a74a338a8a837913db5e2effeef1bd949a49c Story: 2001070 Task: 4687