Merge "Add a bubblewrap ro mount test"

tests/fixtures/config/ansible/git/common-config/playbooks/bubblewrap.yaml

@@ -0,0 +1,12 @@
+- hosts: localhost
+  tasks:
+    - name: Verify that we are unable to write to a ro mount
+      shell: "cp {{ zuul.executor.inventory_file }} /bin/bubblewrap-test-failure"
+      ignore_errors: true
+      register: cp_result
+    - assert:
+        that:
+          - cp_result.rc == 1
+          - "'Read-only file system' in cp_result.stdout"
+    - name: Verify that we are able to write to a rw mount
+      shell: "cp {{ zuul.executor.inventory_file }} {{ zuul.executor.work_root }}/bubblewrap-test-success"

tests/fixtures/config/ansible/git/common-config/zuul.yaml

@@ -239,3 +239,9 @@
     name: failpost
     run: playbooks/post-broken.yaml
     post-run: playbooks/post-broken.yaml
+
+- job:
+    name: bubblewrap
+    run: playbooks/bubblewrap.yaml
+    nodeset:
+      nodes: []

tests/fixtures/config/ansible/git/org_project/.zuul.yaml

@@ -34,3 +34,4 @@
         - multiple-child-no-run
         - multiple-run
         - multiple-run-failure
+        - bubblewrap

tests/unit/test_v3.py

@@ -3789,6 +3789,9 @@ class FunctionalAnsibleMixIn(object):
                                         build_python27.uuid + '.secrets')
             with open(secrets_path) as f:
                 self.assertEqual(f.read(), "test-username test-password")
+        build_bubblewrap = self.getJobFromHistory('bubblewrap')
+        with self.jobLog(build_bubblewrap):
+            self.assertEqual(build_bubblewrap.result, 'SUCCESS')
 
     def test_repo_ansible(self):
         A = self.fake_gerrit.addFakeChange('org/ansible', 'master', 'A')