From: Stephen Rothwell <sfr@canb.auug.org.au>
Date: Sun, 24 Nov 2013 23:28:06 +0000 (+1100)
Subject: limit the builds access to the network
X-Git-Url: http://git.ozlabs.org/?a=commitdiff_plain;h=27b4bc0c4610f7d8e73654cfb45d0fdf966dfcb3;p=next-scripts

limit the builds access to the network
---

diff --git a/do_build b/do_build
index 7f2adc7..767d37a 100755
--- a/do_build
+++ b/do_build
@@ -4,7 +4,10 @@
 
 set -e
 
-ssh "$build_host" /bin/sh -e <<-EOF
+###ssh "$build_host" /bin/sh -e <<-EOF
+ssh root@"$build_host" unshare -n su $(id -u -n) <<-EOF
+	set -e
+
 	echo \$PATH | grep -q "\$HOME/bin" || export PATH="\$HOME/bin:\$PATH"
 	export LANG=C
 
diff --git a/do_last_build b/do_last_build
index f1a20f2..cfa6b5d 100755
--- a/do_last_build
+++ b/do_last_build
@@ -4,7 +4,10 @@
 
 set -e
 
-ssh "$build_host" /bin/sh -e <<-EOF
+##ssh "$build_host" /bin/sh -e <<-EOF
+ssh root@"$build_host" unshare -n su $(id -u -n) <<-EOF
+	set -e
+
 	echo \$PATH | grep -q "\$HOME/bin" || export PATH="\$HOME/bin:\$PATH"
 	export LANG=C
 
@@ -48,7 +51,10 @@ do
 	ka=${a%:*}
 	ca=${a#*:}
 	d=../${ka}_defconfig
-	ssh "$build_host" /bin/sh -e <<-EOF
+	##ssh "$build_host" /bin/sh -e <<-EOF
+	ssh root@"$build_host" unshare -n su $(id -u -n) <<-EOF
+		set -e
+
 		echo \$PATH | grep -q "\$HOME/bin" ||
 			export PATH="\$HOME/bin:\$PATH"
 		export LANG=C