kjuulh/kasperhermansen-blog
1
0
Fork 0
Code Issues 1 Pull Requests 2 Projects Releases Wiki Activity

feat: remove priviledge
Some checks failed
continuous-integration/drone/push Build is failing
Details

Browse Source
This commit is contained in:
kjuulh 2025-06-02 09:08:54 +02:00
parent f765358449
commit cf60c5bcdd
1 changed files with 3 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
.drone.yml
View File

@ -4,15 +4,13 @@ name: "shuttle-drone-templates"
steps: steps:
- name: "wait for dind" - name: "wait for dind"
image: docker:dind image: docker:dind
volumes:
- name: dockersock
path: /var/run
environment: environment:
DOCKER_BUILDKIT: 1 DOCKER_BUILDKIT: 1
DOCKER_PASSWORD: DOCKER_PASSWORD:
from_secret: docker_password from_secret: docker_password
DOCKER_USERNAME: DOCKER_USERNAME:
from_secret: docker_username from_secret: docker_username
DOCKER_HOST: "tcp://192.168.1.155:2376"
commands: commands:
- ls /var/run - ls /var/run
- set -eu - set -eu
@ -20,9 +18,6 @@ steps:
- echo "$${DOCKER_PASSWORD}" | docker login --password-stdin --username="$${DOCKER_USERNAME}" - echo "$${DOCKER_PASSWORD}" | docker login --password-stdin --username="$${DOCKER_USERNAME}"
- name: "build" - name: "build"
image: docker.io/kasperhermansen/shuttle-drone:1690570181415 image: docker.io/kasperhermansen/shuttle-drone:1690570181415
volumes:
- name: dockersock
path: /var/run
environment: environment:
DOCKER_BUILDKIT: 1 DOCKER_BUILDKIT: 1
DOCKER_PASSWORD: DOCKER_PASSWORD:
@ -37,6 +32,7 @@ steps:
from_secret: GIT_USERNAME from_secret: GIT_USERNAME
GIT_PASSWORD: GIT_PASSWORD:
from_secret: GIT_PASSWORD from_secret: GIT_PASSWORD
DOCKER_HOST: "tcp://192.168.1.155:2376"
commands: commands:
- set -eu - set -eu
- apt update && apt install -y libssl-dev pkg-config openssl # musl-tools - apt update && apt install -y libssl-dev pkg-config openssl # musl-tools
@ -56,13 +52,3 @@ steps:
- sha1sum ci/target/debug/ci - sha1sum ci/target/debug/ci
- ldd ci/target/debug/ci - ldd ci/target/debug/ci
- "./ci/target/debug/ci" - "./ci/target/debug/ci"
services:
- name: docker
image: docker:dind
privileged: true
volumes:
- name: dockersock
path: /var/run
volumes:
- name: dockersock
temp: {}