Merge "Add a bubblewrap ro mount test"

tests/fixtures/config/ansible/git/common-config/playbooks/bubblewrap.yaml

@@ -0,0 +1,12 @@
+- hosts: localhost
+  tasks:
+    - name: Verify that we are unable to write to a ro mount
+      shell: "cp {{ zuul.executor.inventory_file }} /bin/bubblewrap-test-failure"
+      ignore_errors: true
+      register: cp_result
+    - assert:
+        that:
+          - cp_result.rc == 1
+          - "'Read-only file system' in cp_result.stdout"
+    - name: Verify that we are able to write to a rw mount
+      shell: "cp {{ zuul.executor.inventory_file }} {{ zuul.executor.work_root }}/bubblewrap-test-success"

tests/fixtures/config/ansible/git/common-config/zuul.yaml

@@ -239,3 +239,9 @@
     name: failpost
     run: playbooks/post-broken.yaml
     post-run: playbooks/post-broken.yaml
+
+- job:
+    name: bubblewrap
+    run: playbooks/bubblewrap.yaml
+    nodeset:
+      nodes: []

tests/fixtures/config/ansible/git/org_project/.zuul.yaml

@@ -34,3 +34,4 @@
         - multiple-child-no-run
         - multiple-run
         - multiple-run-failure
+        - bubblewrap