diff --git a/serverless-resources.yml b/serverless-resources.yml index 3496c4c..9b651e5 100644 --- a/serverless-resources.yml +++ b/serverless-resources.yml @@ -147,6 +147,7 @@ rBuildsBatchJobDefinitionUbuntu2004: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2004" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -162,6 +163,7 @@ rBuildsBatchJobDefinitionUbuntu2204: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:ubuntu-2204" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -177,6 +179,7 @@ rBuildsBatchJobDefinitionDebian10: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-10" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -192,6 +195,7 @@ rBuildsBatchJobDefinitionDebian11: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-11" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -207,6 +211,7 @@ rBuildsBatchJobDefinitionDebian12: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:debian-12" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -222,6 +227,7 @@ rBuildsBatchJobDefinitionCentos7: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-7" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -237,6 +243,7 @@ rBuildsBatchJobDefinitionCentos8: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:centos-8" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -252,6 +259,7 @@ rBuildsBatchJobDefinitionRhel9: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:rhel-9" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -267,6 +275,7 @@ rBuildsBatchJobDefinitionOpensuse154: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:opensuse-154" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -282,6 +291,7 @@ rBuildsBatchJobDefinitionFedora37: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-37" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200 @@ -297,6 +307,7 @@ rBuildsBatchJobDefinitionFedora38: JobRoleArn: "Fn::GetAtt": [ rBuildsEcsTaskIamRole, Arn ] Image: "#{AWS::AccountId}.dkr.ecr.#{AWS::Region}.amazonaws.com/r-builds:fedora-38" + Privileged: false ReadOnlyRootFilesystem: true Timeout: AttemptDurationSeconds: 7200