[Misc] Reduce runner permissions

Summary: reduce arm runner permissions and update actions config Testing: CI pipline Reviewers: D-D-H, sendaoYan Issue: #651
dragonwell-project · Jul 9, 2024 · 46c09c8 · 46c09c8
1 parent cf827ca
commit 46c09c8
Showing 1 changed file with 4 additions and 12 deletions.
diff --git a/.github/workflows/submit.yml b/.github/workflows/submit.yml
@@ -40,13 +40,15 @@ jobs:
     needs: prerequisites
     name: Linux x64
     runs-on: "ubuntu-20.04"
-    container:
-      image: docker.io/dragonwelljdk/build_jdk:8u
     steps:
       - name: Checkout target source
         uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+      - name: Update apt and download dependency
+        run: |
+          sudo apt update -y
+          sudo apt install -y libxtst-dev libxt-dev libxrender-dev libxrandr-dev libxi-dev libcups2-dev libfontconfig1-dev libasound2-dev unzip zip openjdk-8-jdk
       - name: Compile debug
         run: |
           sh configure --with-debug-level=fastdebug --with-cacerts-file=${PWD}/common/security/cacerts --with-milestone=fcs --enable-unlimited-crypto
@@ -136,10 +138,6 @@ jobs:
     name: Linux aarch64(release)
     runs-on: ["ubuntu", "ARM64"]
     steps:
-      - name: Update apt and download dependency
-        run: |
-          sudo apt update -y
-          sudo apt install -y libxtst-dev libxt-dev libxrender-dev libxrandr-dev libxi-dev libcups2-dev libfontconfig1-dev libasound2-dev unzip zip openjdk-8-jdk
       - name: Get boot jdk
         run: |
           if [ ! -f /home/${USER}/dragonwell8/dragonwell-8.15.16/bin/java ];then
@@ -187,10 +185,6 @@ jobs:
     name: Linux aarch64(fastdebug)
     runs-on: ["ubuntu", "ARM64"]
     steps:
-      - name: Update apt and download dependency
-        run: |
-          sudo apt update -y
-          sudo apt install -y libxtst-dev libxt-dev libxrender-dev libxrandr-dev libxi-dev libcups2-dev libfontconfig1-dev libasound2-dev unzip zip openjdk-8-jdk
       - name: Get boot jdk
         run: |
           if [ ! -f /home/${USER}/dragonwell8/dragonwell-8.15.16/bin/java ];then
@@ -249,8 +243,6 @@ jobs:
           if [ ! -f /home/${USER}/jtreg/bin/jtreg ];then
             wget https://compiler-ci-bucket.oss-cn-hangzhou.aliyuncs.com/tools/jtreg_5_1_b01.zip -O /home/${USER}/jtreg_5_1_b01.zip
             cd /home/${USER}
-            sudo apt update -y
-            sudo apt install -y unzip
             unzip jtreg_5_1_b01.zip
           fi
       - name: Test