diff --git a/.github/workflows/unit_tests.sh b/.github/workflows/unit_tests.sh index a416396021..4c1b5332c7 100755 --- a/.github/workflows/unit_tests.sh +++ b/.github/workflows/unit_tests.sh @@ -58,6 +58,11 @@ for phase in "${PHASES[@]}"; do # part of test-execute gets skipped, since it can't run systemd-executor chmod o+x /home/runner capsh --drop=all -- -c "stat $PWD/meson.build" + # (Re)set the current oom-{score-}adj. For some reason a user on GH actions is able to _decrease_ + # its oom-score even after dropping all capabilities (including CAP_SYS_RESOURCE), until the + # score is explicitly changed after sudo. No idea what's going on, but it breaks + # exec-oomscoreadjust-negative.service from test-execute when running unprivileged. + choom -p $$ -n 0 ;; RUN|RUN_GCC|RUN_CLANG|RUN_CLANG_RELEASE) if [[ "$phase" =~ ^RUN_CLANG ]]; then