Remove state_dir from setMountsMap
The setMountsMap command required the state_dir argument, presumably
so that the zuul ansible path (ie, our custom modules) is available.
Unfortunately, it set it as a read-write bind, not read-only. We
certainly don't want jobs (even trusted jobs) modifying the ansible
code that we run.
Switch it to a read-only bind mount.
Also, remove it from special handling inside of the setMountsMap
method and instead, handle it on the executor site for increased
visibility.
Finally, add options to the zuul-bwrap command to set the ro and
rw binds to make interactive testing easier.
Change-Id: I4a0fdae546a2307d78a5c29b5a62a6d223ecb9e9
2 files changed