From: Sam James <sam@gentoo.org>
Date: Mon, 17 Mar 2025 17:17:43 +0000 (+0000)
Subject: ci: disable network
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=97daf31a4ab8b213e7c8d4d805f693f239e3d3f3;p=thirdparty%2Fgcc.git

ci: disable network

Disable network access via 'unshare' in two CI workflows to catch issues
like PR119333 where importing polonius meant bootstrap tried to pull crates
from the internet.

ChangeLog:
	PR rust/119333

	* .github/workflows/bootstrap.yml: Disable network via 'unshare'.
	* .github/workflows/ccpp.yml: Ditto.
---

diff --git a/.github/workflows/bootstrap.yml b/.github/workflows/bootstrap.yml
index f01dc2ad836..4bf042a0be9 100644
--- a/.github/workflows/bootstrap.yml
+++ b/.github/workflows/bootstrap.yml
@@ -42,7 +42,8 @@ jobs:
     - name: Build
       run: |
            cd gccrs-build; \
-           make -j $(nproc)
+           # Build without network access
+           unshare --net --ipc -r /bin/bash -c "make -j $(nproc)"
 
     - name: Run Tests
       run: |
diff --git a/.github/workflows/ccpp.yml b/.github/workflows/ccpp.yml
index bdc2d8df3e5..9762a0a1acd 100644
--- a/.github/workflows/ccpp.yml
+++ b/.github/workflows/ccpp.yml
@@ -61,8 +61,9 @@ jobs:
       run: |
            cd gccrs-build; \
            # Add cargo to our path quickly
-           . "$HOME/.cargo/env";
-           make -Otarget -j $(nproc) 2>&1 | tee log
+           . "$HOME/.cargo/env"; \
+           # Build without network access
+           unshare --net --ipc -r /bin/bash -c "make -Otarget -j $(nproc) 2>&1 | tee log ; exit \${PIPESTATUS[0]}"
 
     - name: Check for new warnings
       run: |