Revision 1169b5e38777b6058eda4ef79898acf0e83295cf authored by Elliot Saba on 18 June 2021, 05:33:07 UTC, committed by Kristoffer on 29 June 2021, 06:52:42 UTC
This adds a proof-of-concept demonstration of two new buildkite plugins: * `cryptic` adds secrets management to privileged pipelines. These pipelines cannot be freely modified; their integrity is verified against a signature maintained by committers with a secret key. This allows certain portions of the CI configuration (which are privileged and can decrypt encrypted files/environment variables) to remain public, but read-only to the general populace. * `sandbox` adds a generic sandboxing mechanism that allows CI steps to be run within user-provided rootfs images. We're using these here to provide compiler toolchains for the `llvm-passes` CI steps, and the plan is to eventually provide _all_ compiler toolchains through such rootfs images. (cherry picked from commit 61ae86da895ff0be8a2cd051277a05ad48f91b4a)
1 parent e0519e3
| File | Mode | Size |
|---|---|---|
| build | ||
| man | ||
| src | ||
| .gitignore | -rw-r--r-- | 55 bytes |
| Makefile | -rw-r--r-- | 2.0 KB |
| Manifest.toml | -rw-r--r-- | 2.2 KB |
| NEWS-update.jl | -rw-r--r-- | 486 bytes |
| Project.toml | -rw-r--r-- | 59 bytes |
| README.md | -rw-r--r-- | 900 bytes |
| make.jl | -rw-r--r-- | 9.2 KB |
Computing file changes ...
