treewide: remove usage of global tags between build configs
Change-Id: Ie7c4714d30f8c3342a97451d58e14cfb43087586
Reviewed-on: https://review.monogon.dev/c/monogon/+/3776
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
Tested-by: Jenkins CI
diff --git a/metropolis/node/BUILD.bazel b/metropolis/node/BUILD.bazel
index 1638083..d04db8b 100644
--- a/metropolis/node/BUILD.bazel
+++ b/metropolis/node/BUILD.bazel
@@ -1,5 +1,6 @@
load("@io_bazel_rules_go//go:def.bzl", "go_library", "go_test")
load("@rules_pkg//:pkg.bzl", "pkg_zip")
+load("//build/go:def.bzl", "go_binary_with_tag")
load("//osbase/build:def.bzl", "erofs_image", "verity_image")
load("//osbase/build:efi.bzl", "efi_unified_kernel_image")
load("//osbase/build/genosrelease:defs.bzl", "os_release")
@@ -35,6 +36,12 @@
"passwd",
])
+go_binary_with_tag(
+ name = "runc",
+ binary = "@com_github_opencontainers_runc//:runc",
+ gotags = ["seccomp"],
+)
+
erofs_image(
name = "rootfs",
files = {
@@ -85,7 +92,7 @@
files_cc = {
"//metropolis/node/core/minit": "/init",
# runc runtime, with cgo
- "@com_github_opencontainers_runc//:runc": "/containerd/bin/runc",
+ ":runc": "/containerd/bin/runc",
"@xfsprogs//:mkfs": "/bin/mkfs.xfs",
"@chrony//:chrony": "/time/chrony",
},