Commits on Jun 17, 2021

1. [buildkite] Implement secrets encryption and sandboxing …

   This adds a proof-of-concept demonstration of two new buildkite plugins:
   
   * `cryptic` adds secrets management to privileged pipelines.  These
   pipelines cannot be freely modified; their integrity is verified against
   a signature maintained by committers with a secret key.  This allows
   certain portions of the CI configuration (which are privileged and can
   decrypt encrypted files/environment variables) to remain public, but
   read-only to the general populace.
   
   *  `sandbox` adds a generic sandboxing mechanism that allows CI steps to
   be run within user-provided rootfs images.  We're using these here to
   provide compiler toolchains for the `llvm-passes` CI steps, and the plan
   is to eventually provide _all_ compiler toolchains through such rootfs
   images.

   

   staticfloat committed Jun 17, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for a3b97dc
   • Browse repository at this point

   Copy the full SHA

   a3b97dc View commit details

   Browse the repository at this point in the history