Skip to content

Disable execution of `umask 0000` + Disable write permission for others category for /builds dir on build jobs

Ahmed Siam requested to merge ahmedsiam/salsa-pipeline:362-fix-top-level-dir-lax-permission into master

GitLab runners execute umask 0000 command by default which may lead to failure of build jobs due to everything being world writeable. By enabling FF_DISABLE_UMASK_FOR_DOCKER_EXECUTOR, umask 0000 command will not execute.

/builds directory is writeable by others by default on arm runners which may lead to failure of arm build jobs.

This MR removes write permission from others category for /builds directory on build jobs to fix this issue.

Special thanks to @beuc who provided the idea of this solution.

Closes #362 (closed)

Edited by Ahmed Siam

Merge request reports