Skip to content

Commit 6af4e4e

Browse files
[SYCL][Devops] Propagate a new secret to containers build (#16384)
Extended build containers action with an extra argument which specifies a password that will be assigned to the `sycl_ci` user created within containers. For now this new secret is unused, so this changes is expected to have no impact on our CI. This is outlined from #16361 to improve testing for that PR: for security reasons actions are only invoked from the default branch and never from a PR branch. Therefore, to actually test that this secret is properly used without errors we need to update the action first.
1 parent da16cd5 commit 6af4e4e

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

.github/workflows/sycl-containers.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -78,6 +78,7 @@ jobs:
7878
file: ${{ matrix.file }}
7979
username: ${{ github.repository_owner }}
8080
password: ${{ secrets.GITHUB_TOKEN }}
81+
sycl_ci_passwd: ${{ secrets.DOCKER_SUDO_PASSWORD }}
8182
tags: |
8283
ghcr.io/${{ github.repository }}/${{ matrix.file }}:${{ matrix.tag }}-${{ github.sha }}
8384
ghcr.io/${{ github.repository }}/${{ matrix.file }}:${{ matrix.tag }}

devops/actions/build_container/action.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,9 @@ inputs:
2121
file:
2222
description: "Dockerfile"
2323
required: true
24+
sycl_ci_passwd:
25+
description: "Password to assign to sycl_ci user within a container"
26+
required: true
2427

2528
runs:
2629
using: "composite"
@@ -41,3 +44,4 @@ runs:
4144
file: ${{ github.workspace }}/devops/containers/${{ inputs.file }}.Dockerfile
4245
secrets: |
4346
github_token=${{ github.token }}
47+
sycl_ci_passwd=${{ inputs.sycl_ci_passwd }}

0 commit comments

Comments
 (0)