d4b7066060
Docker/oci and thus gitlab-runner, default to a root user inside the namespace, even if its an unprivileged one. This can cause issues and let permission bugs sneak in, as we are functionally root when running the build. Switch the build jobs to run with our new "containeruser" so we avoid much of it. Our user is still in the wheel/sudo group but that's fine as long we don't elevate the privileges unintentionally. Noticeably for the time being, we will need to chown the CI_PROJECT_DIR checkout as the gitlab runner might try to reuse pre-existing and cached volumes of the project checkout. Additionally we need to change the ccache path, so we will avoid the existing cache owned by "root". Close https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/2433 Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8763>
106 lines
2.7 KiB
Bash
106 lines
2.7 KiB
Bash
#! /bin/bash
|
|
|
|
set -eux
|
|
|
|
# Fedora base image disable installing documentation files. See https://pagure.io/atomic-wg/issue/308
|
|
# We need them to cleanly build our doc.
|
|
sudo sed -i '/tsflags=nodocs/d' /etc/dnf/dnf.conf
|
|
sudo dnf -y swap coreutils-single coreutils-full
|
|
sudo dnf -y swap glibc-minimal-langpack glibc-all-langpacks
|
|
|
|
# Add rpm fusion repositories in order to access all of the gst plugins
|
|
sudo dnf install -y \
|
|
"https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm" \
|
|
"https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm"
|
|
|
|
# Enable the debuginfo repos so -debug packages are kept in sync
|
|
sudo dnf install -y dnf-plugins-core
|
|
sudo dnf config-manager --set-enabled '*-debuginfo'
|
|
|
|
sudo dnf upgrade -y && sudo dnf distro-sync -y
|
|
|
|
# Install the dependencies of gstreamer
|
|
sudo dnf install --setopt=install_weak_deps=false -y $(<./ci/docker/fedora/deps.txt)
|
|
|
|
# Install devhelp files for hotdoc
|
|
sudo dnf install -y glib2-doc gdk-pixbuf2-devel gtk3-devel-docs gtk4-devel-docs libsoup-doc
|
|
|
|
# Make sure we don't end up installing these from some transient dependency
|
|
sudo dnf remove -y "gstreamer1*-devel" rust cargo meson 'fdk-aac-free*'
|
|
|
|
sudo bash ./ci/scripts/create-pip-config.sh
|
|
sudo pip3 install meson==1.7.2 python-gitlab tomli junitparser bs4
|
|
sudo pip3 install git+https://github.com/hotdoc/hotdoc.git@8c1cc997f5bc16e068710a8a8121f79ac25cbcce
|
|
|
|
# Install most debug symbols, except the big ones from things we use
|
|
debug_packages=$(rpm -qa | grep -v -i \
|
|
-e bash \
|
|
-e bat \
|
|
-e bluez \
|
|
-e boost \
|
|
-e ccache \
|
|
-e ceph \
|
|
-e clang \
|
|
-e cmake \
|
|
-e colord \
|
|
-e compiler-rt \
|
|
-e cpp \
|
|
-e cups \
|
|
-e demos \
|
|
-e flexiblas \
|
|
-e flite \
|
|
-e gcc \
|
|
-e gcc-debuginfo \
|
|
-e gcc-debugsource \
|
|
-e gdal \
|
|
-e gdb \
|
|
-e geocode \
|
|
-e git \
|
|
-e glusterfs \
|
|
-e gpg \
|
|
-e GraphicsMagick \
|
|
-e groff \
|
|
-e gstreamer1 \
|
|
-e java \
|
|
-e leptonica \
|
|
-e libdap \
|
|
-e libdb \
|
|
-e libdnf \
|
|
-e libspatialite \
|
|
-e llvm \
|
|
-e lua \
|
|
-e MUMPS \
|
|
-e NetworkManager \
|
|
-e nodejs \
|
|
-e openblas \
|
|
-e opencv \
|
|
-e openexr \
|
|
-e perl \
|
|
-e poppler \
|
|
-e qemu \
|
|
-e qt5 \
|
|
-e qt6 \
|
|
-e sequoia \
|
|
-e spice \
|
|
-e sqlite \
|
|
-e suitesparse \
|
|
-e systemd \
|
|
-e tesseract \
|
|
-e tests \
|
|
-e tools \
|
|
-e tpm2 \
|
|
-e unbound \
|
|
-e valgrind \
|
|
-e vim \
|
|
-e vtk \
|
|
-e xen \
|
|
-e xerces \
|
|
-e xorg \
|
|
)
|
|
sudo dnf debuginfo-install -y --best --allowerasing --skip-broken $debug_packages
|
|
|
|
echo "Removing DNF cache"
|
|
sudo dnf clean all
|
|
|
|
sudo rm -rf /var/cache/dnf /var/log/dnf*
|