elements/ci/test
Lőrinc 18739ec488
ci: unconfine seccomp for i686 no IPC
Docker 29.4.2 blocks `socketcall(2)` in the default seccomp profile:
https://docs.docker.com/engine/release-notes/29/#2942
https://github.com/moby/profiles/releases/tag/seccomp%2Fv0.2.2
https://github.com/moby/moby/pull/52501

That affects the `i686, no IPC` job because it runs 32-bit Linux test binaries inside Docker.

Add Docker's documented `--security-opt seccomp=unconfined` workaround to this job's `CI_CONTAINER_CAP` - the hook `ci/test/02_run_container.py` already appends to `docker run`.

This restores socket availability for the 32-bit test binaries throughout the job:
https://docs.docker.com/engine/security/seccomp/#run-without-the-default-seccomp-profile

Github-Pull: #35202
Rebased-From: 11c9ef92a8daf030f75f88f324396b2248c65a64
2026-05-05 15:12:37 +02:00
..
00_setup_env.sh ci: dynamically match makejobs with cores 2025-09-23 15:26:05 +01:00
00_setup_env_arm.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_i686_multiprocess.sh ci: unconfine seccomp for i686 no IPC 2026-05-05 15:12:37 +02:00
00_setup_env_mac_cross.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_mac_native.sh ci: add ccache hit-rate warning when < 75% 2025-09-23 15:26:06 +01:00
00_setup_env_mac_native_fuzz.sh ci: add ccache hit-rate warning when < 75% 2025-09-23 15:26:06 +01:00
00_setup_env_native_asan.sh ci: use LLVM 21 2025-09-03 16:51:18 +01:00
00_setup_env_native_centos.sh ci: return to using dash in CentOS job 2025-09-03 11:51:12 +01:00
00_setup_env_native_fuzz.sh ci: use LLVM 21 2025-09-03 16:51:18 +01:00
00_setup_env_native_fuzz_with_msan.sh ci: link against -lstdc++ in native fuzz with msan job 2025-09-23 15:26:11 +01:00
00_setup_env_native_fuzz_with_valgrind.sh ci: Do not try to install for fuzz builds 2025-03-07 11:09:57 +00:00
00_setup_env_native_msan.sh ci: use LLVM 21 2025-09-03 16:51:18 +01:00
00_setup_env_native_nowallet_libbitcoinkernel.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_native_previous_releases.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_native_tidy.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_native_tsan.sh ci: use LLVM 21 2025-09-03 16:51:18 +01:00
00_setup_env_native_valgrind.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_s390x.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
00_setup_env_win64.sh ci: Switch to gcr.io mirror to avoid rate limits 2025-02-19 15:48:04 +01:00
01_base_install.sh ci: link against -lstdc++ in native fuzz with msan job 2025-09-23 15:26:11 +01:00
02_run_container.sh ci: have base install run in right dir 2025-09-23 15:25:47 +01:00
03_test_script.sh ci: add ccache hit-rate warning when < 75% 2025-09-23 15:26:06 +01:00
GetCMakeLogFiles.cmake ci: Handle log files regardless of CMake's version 2024-09-07 14:38:14 +01:00
wrap-valgrind.sh scripted-diff: Bump copyright headers 2021-12-30 19:36:57 +02:00
wrap-wine.sh ci: Migrate CI scripts to CMake 2024-08-16 21:19:13 +01:00