commit 147776e684781e7d3b72ab0bfb84fc7573efd564
author Andrew Geissler <geissonator@yahoo.com> Fri Mar 26 15:59:12 2021 -0500
committer Andrew Geissler <geissonator@yahoo.com> Tue Apr 06 12:58:17 2021 +0000
tree 5ca0b652ceb6752b3155983273ced287c6466053
parent 2fde84b064d0bd49b76024dbb95a24801c203007

run qemu container with root permission

The QEMU application requires root access to utilize the standard ports.
These ports are not open outside of the docker subsystem (i.e. no
command line -p option) so the impact should be minimal.

Tested:
- Verified with this change that the run-qemu-robot-test.sh could
  complete successfully on CI infrastructure

Change-Id: I0e73c416af3bbdf6cfb17607097f974f5236d87e
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>

run-qemu-robot-test.sh

diff --git a/run-qemu-robot-test.sh b/run-qemu-robot-test.sh
index 93dfa33..05fb359 100755
--- a/run-qemu-robot-test.sh
+++ b/run-qemu-robot-test.sh
@@ -107,13 +107,14 @@
   # root in docker required to open up the https/ssh ports
   obmc_qemu_docker=$(docker run --detach \
                                 --rm \
+                                --user root \
                                 --env HOME="${OBMC_BUILD_DIR}" \
                                 --env QEMU_RUN_TIMER="${QEMU_RUN_TIMER}" \
                                 --env QEMU_ARCH="${QEMU_ARCH}" \
                                 --env QEMU_BIN="${QEMU_BIN}" \
                                 --env MACHINE="${MACHINE}" \
                                 --workdir "${OBMC_BUILD_DIR}"           \
-                                --volume "${UPSTREAM_WORKSPACE}":"${OBMC_BUILD_DIR}" \
+                                --volume "${UPSTREAM_WORKSPACE}":"${OBMC_BUILD_DIR}:ro" \
                                 --tty \
                                 "${DOCKER_IMG_NAME}" "${OBMC_BUILD_DIR}"/boot-qemu-test.exp)