add readonly mount option to entitlement volume to avoid defaut remou…

…nting readwrite permissions
openshift-pipelines · Oct 28, 2024 · e398d7e · e398d7e
1 parent dfa0d5f
commit e398d7e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/buildah-bud.sh b/scripts/buildah-bud.sh
@@ -65,7 +65,7 @@ fi
 
 ENTITLEMENT_VOLUME=""
 if [[ "${WORKSPACES_RHEL_ENTITLEMENT_BOUND}" == "true" ]]; then
-    ENTITLEMENT_VOLUME="--volume ${WORKSPACES_RHEL_ENTITLEMENT_PATH}:/etc/pki/entitlement"
+    ENTITLEMENT_VOLUME="--volume ${WORKSPACES_RHEL_ENTITLEMENT_PATH}:/etc/pki/entitlement:ro"
 fi
 
 #