Changes between Version 8 and Version 9 of HowtoContributeABuildbot
- Timestamp:
- 2011-01-04T18:46:07Z (14 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
HowtoContributeABuildbot
v8 v9 4 4 == Configuration == 5 5 6 This is also the part where you choose what sort of controls you want 7 to have over your buildslave. I would strongly advise you not to run 8 your buildslave under your user account, and (duh) not to give it any 9 sort of elevated privileges such as root! 6 Create a user account with low privileges to run buildbot. 10 7 11 So, running under a separate user account without high privileges is 12 definitely a good idea, but since you're a security-aware user I guess I 13 don't need to tell you this. 14 15 Also you can use other mechanisms to lock it down more like jail, 8 === Optional Configurations === 9 You can use other mechanisms to lock buildbot down like jail, 16 10 chroot, etc. David Abrahams uses Solaris Zones to contain his 17 buildslaves. I don't know what particular features Zones offer. I 18 wonder if this means he can use ZFS snapshots to rewind the state of 19 the filesystem before running each build. That would be cool. Brian 20 Warner and the other buildbot maintainers have been hacking on some 11 buildslaves. Brian Warner and the other buildbot maintainers have been hacking on some 21 12 tricks to set up your buildslaves inside a full virtual machine so 22 that you can have a pristine machine for every build -- e.g. "This is 23 a fresh install of OpenBSD 4.6 with nothing added except for buildbot 24 and its dependencies.". 25 26 Personally I don't (yet) use any such fancy techniques -- I just run 27 my buildslaves under a separate user account which doesn't have 28 access to my personal stuff or to root privileges. 13 that you can have a pristine machine for every build. 29 14 30 15 Step 3: choose a name for your buildslave which will fit into the