diff options
| author | Adin Scannell <ascannell@google.com> | 2021-01-07 15:28:41 -0800 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-01-07 15:30:37 -0800 |
| commit | 77b340ce82230e4e0bded01f43232c708328cd7e (patch) | |
| tree | d098a443ba2a49718f2d07d8b62b99b79e572e2b /website/BUILD | |
| parent | 04b37c822022c27cb144e4af5ef21043a74127f3 (diff) | |
Require specific buckets for pprof handler.
This further restricts the surface exposed only to artifacts
generated by the continuous integration system.
This change also installs appropriate root certificates, so
that objects can be fetched from https://storage.googleapis.com.
PiperOrigin-RevId: 350650197
Diffstat (limited to 'website/BUILD')
| -rw-r--r-- | website/BUILD | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/website/BUILD b/website/BUILD index 676c2b701..d5315abce 100644 --- a/website/BUILD +++ b/website/BUILD @@ -38,6 +38,7 @@ genrule( ":syscallmd", "//website/blog:posts", "//website/cmd/server", + "@google_root_pem//file", ], outs = ["files.tgz"], cmd = "set -x; " + @@ -61,6 +62,8 @@ genrule( "ruby /checks.rb " + "/output && " + "cp $(location //website/cmd/server) $$T/output/server && " + + "mkdir -p $$T/output/etc/ssl && " + + "cp $(location @google_root_pem//file) $$T/output/etc/ssl/cert.pem && " + "tar -zcf $@ -C $$T/output . && " + "rm -rf $$T", tags = [ |