hack 5

justfile

@@ -108,7 +108,7 @@ dev-env *args="": allocate-2M-hugepages allocate-1G-hugepages mount-hugepages fi
       {{ args }}
 
 [script]
-compile-env *args:
+compile-env *args: fill-out-dev-env-template
     {{ _just_debuggable_ }}
     mkdir -p "$(pwd)/sterile"
     declare tmp_link
@@ -121,7 +121,6 @@ compile-env *args:
     declare tmp_targetdir
     tmp_targetdir="$(mktemp -p "$(pwd)/sterile" --directory --suffix=".$(date --iso-8601=s).target")"
     declare -r tmp_targetdir
-    ln -s / "${tmp_link}/cheat"
     ln -s /bin "${tmp_link}/bin"
     ln -s /lib "${tmp_link}/lib"
     ln -s /sysroot "${tmp_link}/sysroot"
@@ -130,7 +129,7 @@ compile-env *args:
       --rm \
       --read-only \
       --name dataplane-compile-env \
-      --tmpfs /tmp:uid=$(id -u),gid=$(id -g),noexec,nosuid \
+      --tmpfs /tmp:uid=$(id -u),gid=$(id -g),nodev,noexec,nosuid \
       --mount type=tmpfs,destination=${HOME},tmpfs-mode=1777 \
       --mount type=bind,source="$(pwd),destination=/work,bind-propagation=rprivate,readonly" \
       --mount type=bind,source="${tmp_link},destination=/work/compile-env,bind-propagation=rprivate,readonly" \
@@ -141,8 +140,6 @@ compile-env *args:
       --workdir /work \
       "{{ _compile_env_container }}" \
       {{ args }}
-#    "{{compile_env_container}}" \
-#    sh -euxo pipefail -c "curl --proto =https --tlsv1.2 -sSf https://sh.rustup.rs > /tmp/rustup.sh"
 
 [script]
 pull-compile-env: