34857
0%
main: 93%

Ran 13 Aug 2020 07:31PM UTC

Jobs 1

Files 440

Run time 2min

Badge

Embed ▾

pending completion

Build # 34857

Build Type

push

travis-ci-com

Committed by

web-flow

Commit Message

Add non-root pantsbuild user to remote execution image (#10583)

### Problem

The remote execution image used on RBE ran as root. For various reasons (including security), we should run programs in containers using this image as a non-root user.

### Solution

Add a non-root `pantsbuild` user and make the image use it.

### Result

Pants does not run as root in remote execution.

Coverage Stats

0 of 29020 relevant lines covered (0.0%)

0.0 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
5	34857.5 (PANTS_CONFIG_FILES="${TRAVIS_BUILD_DIR}/pants.travis-ci.toml" PANTS_DYNAMIC_UI=false LC_ALL="en_US.UTF-8" AWS_BUCKET=ci-public.pantsbuild.org BOOTSTRAPPED_PEX_KEY_PREFIX=daily/${TRAVIS_BUILD_NUMBER}/${TRAVIS_BUILD_ID}/pants.pex NATIVE_ENGINE_SO_KEY_PREFIX=monthly/native_engine_so PYENV_PY27_VERSION=2.7.18 PYENV_PY36_VERSION=3.6.10 PYENV_PY37_VERSION=3.7.7 PYENV_PY38_VERSION=3.8.3 PYENV_ROOT_OSX=${HOME}/.pants_pyenv PYENV_ROOT="${PYENV_ROOT:-${PYENV_ROOT_OSX}}" PATH="${PYENV_ROOT}/shims:${PATH}" AWS_CLI_ROOT="${HOME}/.aws_cli" AWS_ACCESS_KEY_ID__TO_BE_REEXPORTED_ON_DEPLOYS=AKIAV6A6G7RQ2HFZ5KP7 AWS_SECRET_ACCESS_KEY=[secure] RUST_BACKTRACE="all" BOOTSTRAPPED_PEX_KEY_SUFFIX=py36.linux PANTS_REMOTE_CA_CERTS_PATH=/usr/lib/google-cloud-sdk/lib/third_party/grpc/_cython/_credentials/roots.pem CACHE_NAME=python_tests.py36)	13 Aug 2020 07:31PM UTC	0	0.0	Travis Job 34857.5

Source Files on build 34857

Detailed source file information is not available for this build.

pantsbuild / pants / 34857
0%
main: 93%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 34857

pantsbuild / pants / 34857 0% main: 93%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 34857

pantsbuild / pants / 34857
0%
main: 93%

README BADGES
x