Changes between Version 8 and Version 9 of HowtoContributeABuildbot


Ignore:
Timestamp:
2011-01-04T18:46:07Z (13 years ago)
Author:
arch_o_median
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • HowtoContributeABuildbot

    v8 v9  
    44== Configuration ==
    55
    6 This is also the part where you choose what sort of controls you want 
    7 to have over your buildslave.  I would strongly advise you not to run 
    8 your buildslave under your user account, and (duh) not to give it any 
    9 sort of elevated privileges such as root!
     6Create a user account with low privileges to run buildbot.
    107
    11 So, running under a separate user account without high privileges is 
    12 definitely a good idea, but since you're a security-aware user I guess I 
    13 don't need to tell you this.
    14 
    15 Also you can use other mechanisms to lock it down more like jail, 
     8=== Optional Configurations ===
     9You can use other mechanisms to lock buildbot down like jail, 
    1610chroot, etc.  David Abrahams uses Solaris Zones to contain his 
    17 buildslaves.  I don't know what particular features Zones offer.  I 
    18 wonder if this means he can use ZFS snapshots to rewind the state of 
    19 the filesystem before running each build.  That would be cool.  Brian 
    20 Warner and the other buildbot maintainers have been hacking on some 
     11buildslaves.  Brian Warner and the other buildbot maintainers have been hacking on some 
    2112tricks to set up your buildslaves inside a full virtual machine so 
    22 that you can have a pristine machine for every build -- e.g. "This is 
    23 a fresh install of OpenBSD 4.6 with nothing added except for buildbot 
    24 and its dependencies.".
    25 
    26 Personally I don't (yet) use any such fancy techniques -- I just run 
    27 my buildslaves under a separate user account which doesn't have 
    28 access to my personal stuff or to root privileges.
     13that you can have a pristine machine for every build.
    2914
    3015Step 3: choose a name for your buildslave which will fit into the