veto/docker-compose.yml at main · runkids/veto · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# docker-compose.yml
services:
  test:
    build: .
    container_name: veto-test
    volumes:
      - ./src:/app/src:ro
      - ./tests:/app/tests:ro
      - cargo-cache:/usr/local/cargo/registry
      - target-cache:/app/target
    command: cargo test

  dev:
    build: .
    container_name: veto-dev
    volumes:
      - .:/app
      - cargo-cache:/usr/local/cargo/registry
      - target-cache:/app/target
    stdin_open: true
    tty: true
    command: /bin/bash

  # Safe sandbox for testing veto with dangerous commands
  # Run: make sandbox
  sandbox:
    build: .
    container_name: veto-sandbox
    environment:
      - TERM=xterm-256color
    volumes:
      - ./target/release/veto:/usr/local/bin/veto:ro
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    stdin_open: true
    tty: true
    command: /bin/bash

volumes:
  cargo-cache:
  target-cache: