These allow make docker to pass again when running locally, which broke due to the new dependency on git and git's insistance on safe directories. This didn't come up in CI because we re-use previously built Docker image in that setting.
Also mount the source tree read-only into the build-stage container, simply since it seems good to do so.
These allow
make dockerto pass again when running locally, which broke due to the new dependency on git and git's insistance on safe directories. This didn't come up in CI because we re-use previously built Docker image in that setting.Also mount the source tree read-only into the build-stage container, simply since it seems good to do so.