Enable sandboxing for swift builds (#866)

Prevents issues with non-hermetic bugs like #865.
bazelbuild · Jul 27, 2022 · 088096a · 088096a
1 parent 4ab0e56
commit 088096a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.bazelci/presubmit.yml b/.bazelci/presubmit.yml
@@ -33,6 +33,10 @@ x_defaults:
       - "-//examples/xplatform/grpc/..." # TODO: Fix grpc on Linux
   windows_common: &windows_common
     platform: windows
+    build_flags:
+      # Override 'sandboxed' strategy set in .bazelrc because it's not
+      # available on Windows
+      - "--strategy=SwiftCompile="
     build_targets:
       - "//tools/..."
 

diff --git a/.bazelrc b/.bazelrc
@@ -8,3 +8,7 @@ build --macos_minimum_os=10.15
 
 # Make sure no warnings slip into the C++ tools we vendor
 build --features treat_warnings_as_errors
+
+# The default strategy is worker, which has sandboxing disabled by default,
+# which can hide issues with non-hermetic bugs.
+build --strategy=SwiftCompile=sandboxed