tree 973ca7172439130c0597533c97365df8969efbc5
parent e63dcc62a5a791fa5a50fffab93cf673131ead21
author James E. Blair <jeblair@redhat.com> 1500932263 -0700
committer James E. Blair <jeblair@redhat.com> 1500932731 -0700

Remove state_dir from setMountsMap

The setMountsMap command required the state_dir argument, presumably
so that the zuul ansible path (ie, our custom modules) is available.

Unfortunately, it set it as a read-write bind, not read-only.  We
certainly don't want jobs (even trusted jobs) modifying the ansible
code that we run.

Switch it to a read-only bind mount.

Also, remove it from special handling inside of the setMountsMap
method and instead, handle it on the executor site for increased
visibility.

Finally, add options to the zuul-bwrap command to set the ro and
rw binds to make interactive testing easier.

Change-Id: I4a0fdae546a2307d78a5c29b5a62a6d223ecb9e9