Merge remote-tracking branch 'origin/master' into publish/greeter-0.1.1

runner/compose.yml

@@ -28,12 +28,17 @@ services:
 
 volumes:
   cargoxx-cache-store:
+    # Explicit name disables compose's project-prefix so spawned job
+    # containers (which don't know about compose) can reference the
+    # same volume by the same name.
+    name: cargoxx-cache-store
     driver: local
     driver_opts:
       type: none
       o: bind
       device: "${PWD}/cache/store"
   cargoxx-cache-keys:
+    name: cargoxx-cache-keys
     driver: local
     driver_opts:
       type: none

runner/config.yaml

@@ -25,7 +25,12 @@ container:
   options: "-v cargoxx-cache-store:/srv/cargoxx-cache/store
             -v cargoxx-cache-keys:/srv/cargoxx-cache/keys:ro"
   workdir_parent: /workspace
-  valid_volumes: []
+  # Whitelist regex of bind specs act_runner forwards to spawned job
+  # containers. The regex matches the full `source:target[:opts]`
+  # string, so a permissive prefix is enough.
+  valid_volumes:
+    - "cargoxx-cache-store"
+    - "cargoxx-cache-keys"
   docker_host: "unix:///var/run/docker.sock"
   force_pull: false