remote: guard against symlinks in earlier path components

[safcm/safcm.git] / .gitlab-ci.yml

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 2ffbdf32949529ed3a00e156a382d817279b9ff3..a3b7c4d1932655d0ce0a094f5061a7080e9ab8dd 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,14 +1,22 @@
 .template-docker: &template-docker
   before_script:
     - apt-get update
-    - apt-get install --no-install-recommends --yes build-essential ca-certificates git golang golang-1.16 golang-golang-x-tools make
+    - apt-get install --no-install-recommends --yes build-essential ca-certificates git golang golang-1.16 golang-golang-x-tools make openssh-server shellcheck
   script:
+    # Gitlab-runner uses umask 0000 (wtf?!) and mixes nobody and root user
+    # when setting up the environment. This breaks ssh's permission check on
+    # authorized_keys.
+    - chown -R root:root /builds
+    - chmod -R go-w /builds
     # NOTE: golang is still using golang-1.15
     - mkdir -p $HOME/go/bin
     - ln -sf /usr/lib/go-1.16/bin/go $HOME/go/bin
     - ln -sf /usr/lib/go-1.16/bin/gofmt $HOME/go/bin
     #
-    - ./ci/run TESTFLAGS=-v
+    - mkdir /run/sshd
+    - ./ci/run
+    # Windows is not really supported, but at least check building works
+    - PATH=$HOME/go/bin:$PATH make GOOS=windows GOFLAGS=
 
 debian-sid:
   <<: *template-docker