use firejail for builds

[next-scripts] / do_last_build

diff --git a/do_last_build b/do_last_build
index 64e75853d267975d8e79a7954e4e985c24465970..80cfe3c98e22f34c639265064f50f3894a347bad 100755 (executable)
--- a/do_last_build
+++ b/do_last_build
@@ -4,7 +4,7 @@
 
 set -e
 
-cmd="/bin/sh"
+cmd="firejail --profile=$bin_dir/build.profile /bin/sh"
 [ "$build_host" ] &&
        cmd="ssh root@$build_host unshare -n su $(id -u -n)"