# Linter: untrusted repositories cannot mount host volumes

**URL:** https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360
**Category:** Drone Support
**Created:** [January 11, 2019, 1:26pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360 "2019-01-11T13:26:30Z")
**Posts on this page:** 17
**Page:** 1

<div class="post-metadata">

### Author: ![zhanwenzhuo-github](https://avatars.discourse-cdn.com/v4/letter/z/eb8c5e/32.png) [@zhanwenzhuo-github](https://drone.discourse.group/u/zhanwenzhuo-github)
#### Post date: [January 11, 2019, 1:26pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/1 "2019-01-11T13:26:30Z")

</div>

linter: untrusted repositories cannot mount host volumes  
I met the above error but I did not find where to set up it in the web console of in drone/drone:1.0.0-rc.3.  
I use docker run to build a single drone server as below:

docker run   
–volume=/var/run/docker.sock:/var/run/docker.sock   
–volume=/var/lib/drone:/data   
–env=DRONE\_GITHUB\_SERVER=https://github.com   
–env=DRONE\_GITHUB\_CLIENT\_ID=…   
–env=DRONE\_GITHUB\_CLIENT\_SECRET=…   
–env=DRONE\_RUNNER\_CAPACITY=1   
–env=DRONE\_SERVER\_HOST=[drone.single.com](http://drone.single.com)   
–env=DRONE\_SERVER\_PROTO=https   
–env=DRONE\_TLS\_AUTOCERT=false   
–env=DRONE\_GIT\_ALWAYS\_AUTH=false   
–env=DRONE\_ADMIN=zhanwenzhuo-github   
–publish=80:80   
–publish=443:443   
–restart=always   
–detach=true   
–name=drone   
drone/drone:1.0.0-rc.3

---

<div class="post-metadata">

### Author: ![lukatera](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/lukatera/32/6051_2.png) [@lukatera](https://drone.discourse.group/u/lukatera)
#### Post date: [January 11, 2019, 2:09pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/2 "2019-01-11T14:09:58Z")

</div>

You have to set it up thourgh CLI:  
`drone repo update --trusted <your/repo>`

---

<div class="post-metadata">

### Author: ![shynome](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/shynome/32/3574_2.png) [@shynome](https://drone.discourse.group/u/shynome)
#### Post date: [January 11, 2019, 3:49pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/3 "2019-01-11T15:49:16Z")

</div>

you can find the setting at a active drone repo settings

 ![image](https://canada1.discourse-cdn.com/flex003/uploads/testdrone/original/2X/d/d2a78a1f0fa30629dede9561810060160d6667ae.png)

---

<div class="post-metadata">

### Author: ![shynome](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/shynome/32/3574_2.png) [@shynome](https://drone.discourse.group/u/shynome)
#### Post date: [January 11, 2019, 3:51pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/4 "2019-01-11T15:51:47Z")

</div>

maybe your admin is set wrong , that will make you can’t set any settings

---

<div class="post-metadata">

### Author: ![zhanwenzhuo-github](https://avatars.discourse-cdn.com/v4/letter/z/eb8c5e/32.png) [@zhanwenzhuo-github](https://drone.discourse.group/u/zhanwenzhuo-github)
#### Post date: [January 14, 2019, 2:53am UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/5 "2019-01-14T02:53:32Z")

</div>

I have use CLI to update it but it seemed that no use.  
…  
root@awx-dev-02:~/my\_python\_shell# drone repo info zhanwenzhuo-github/game-of-life  
Owner: zhanwenzhuo-github  
Repo: game-of-life  
Config: .drone.yml  
Visibility: public  
Private: false  
Trusted: false  
Protected: false  
Remote: [https://github.com/zhanwenzhuo-github/game-of-life.git](https://github.com/zhanwenzhuo-github/game-of-life.git)  
root@awx-dev-02:~/my\_python\_shell# drone repo update zhanwenzhuo-github/game-of-life --trusted=true  
Successfully updated repository zhanwenzhuo-github/game-of-life  
root@awx-dev-02:~/my\_python\_shell# drone repo info zhanwenzhuo-github/game-of-life  
Owner: zhanwenzhuo-github  
Repo: game-of-life  
Config: .drone.yml  
Visibility: public  
Private: false  
Trusted: false  
Protected: false  
Remote: [https://github.com/zhanwenzhuo-github/game-of-life.git](https://github.com/zhanwenzhuo-github/game-of-life.git)  
…

---

<div class="post-metadata">

### Author: ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)
#### Post date: [January 14, 2019, 3:20am UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/6 "2019-01-14T03:20:48Z")

</div>

only a system administrator can Trusted mode. If you cannot set this field it is because you are not a Drone system administrator. To create an administrative user please follow the instructions here: [https://docs.drone.io/administration/user/admins/](https://docs.drone.io/administration/user/admins/)

---

<div class="post-metadata">

### Author: ![zhanwenzhuo-github](https://avatars.discourse-cdn.com/v4/letter/z/eb8c5e/32.png) [@zhanwenzhuo-github](https://drone.discourse.group/u/zhanwenzhuo-github)
#### Post date: [January 14, 2019, 5:36am UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/7 "2019-01-14T05:36:21Z")

</div>

Thanks a lot!

And I have updated the command below.  
…  
docker run   
–volume=/var/run/docker.sock:/var/run/docker.sock   
–volume=/var/lib/drone:/data   
–env=DRONE\_GITHUB\_SERVER=https://github.com   
–env=DRONE\_GITHUB\_CLIENT\_ID=9cdfd9e8a13d3c004e0c   
–env=DRONE\_GITHUB\_CLIENT\_SECRET=322c2f1bc178aaa83aa753531f126c8f0048c0e3   
–env=DRONE\_RUNNER\_CAPACITY=2   
–env=DRONE\_SERVER\_HOST=drone-dev-02.awx.im   
–env=DRONE\_SERVER\_PROTO=https   
–env=DRONE\_TLS\_AUTOCERT=true   
–env=DRONE\_USER\_CREATE=username:zhanwenzhuo-github,admin:true   
–publish=80:80   
–publish=443:443   
–restart=always   
–detach=true   
–name=drone   
drone/drone:1.0.0-rc.4  
…

---

<div class="post-metadata">

### Author: ![marwan-at-work](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/marwan-at-work/32/4466_2.png) [@marwan-at-work](https://drone.discourse.group/u/marwan-at-work)
#### Post date: [February 26, 2019, 5:52am UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/8 "2019-02-26T05:52:04Z")

</div>

I am having a similar problem in Drone Cloud for an open source project, however I don’t know how I can make my repository trusted.

---

<div class="post-metadata">

### Author: ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)
#### Post date: [February 26, 2019, 9:08am UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/9 "2019-02-26T09:08:24Z")

</div>

> I am having a similar problem in Drone Cloud for an open source project, however I don’t know how I can make my repository trusted.

Trusted builds are essentially granted root access to the host machine. For security reasons, we would never grant a project on Drone Cloud trusted access to our servers. If you require host machine access to run your build, you will need to install and run Drone on your own servers.

---

<div class="post-metadata">

### Author: ![marwan-at-work](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/marwan-at-work/32/4466_2.png) [@marwan-at-work](https://drone.discourse.group/u/marwan-at-work)
#### Post date: [February 26, 2019, 3:20pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/10 "2019-02-26T15:20:53Z")

</div>

So for open source projects, there’s no way to issue a docker build/push from drone?

---

<div class="post-metadata">

### Author: ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)
#### Post date: [February 26, 2019, 5:57pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/11 "2019-02-26T17:57:58Z")

</div>

> [@On another topic](https://drone.discourse.group/t/3438/10):
>
> So for open source projects, there’s no way to issue a docker build/push from drone?

use the official [docker plugin](http://plugins.drone.io/drone-plugins/drone-docker/). This is how we (the drone project) build and publish images at [cloud.drone.io](http://cloud.drone.io).

---

<div class="post-metadata">

### Author: ![marwan-at-work](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/marwan-at-work/32/4466_2.png) [@marwan-at-work](https://drone.discourse.group/u/marwan-at-work)
#### Post date: [February 26, 2019, 6:52pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/12 "2019-02-26T18:52:15Z")

</div>

Ah thank you! I will try it out today.

I was going through the docs and the “docker” example showed the volume mounts, so it might be helpful to mention this plugin in the docker examples. Thank you for the quick responses!

---

<div class="post-metadata">

### Author: ![madsonic](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/madsonic/32/6115_2.png) [@madsonic](https://drone.discourse.group/u/madsonic)
#### Post date: [April 19, 2019, 4:15pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/13 "2019-04-19T16:15:23Z")

</div>

even with a trusted repo (verified with drone info …), i am still getting this error as well

Owner: [redacted]  
Repo: [redacted]  
Config: .drone.yml  
Visibility: private  
Private: true  
Trusted: true  
Protected: false  
Remote: [redacted]

---

<div class="post-metadata">

### Author: ![madsonic](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/madsonic/32/6115_2.png) [@madsonic](https://drone.discourse.group/u/madsonic)
#### Post date: [April 19, 2019, 4:19pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/14 "2019-04-19T16:19:28Z")

</div>

it doesnt seem like this matter. all that matter is that you pass in the ‘–trusted’ flag, which seems redundant?

---

<div class="post-metadata">

### Author: ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)
#### Post date: [April 19, 2019, 4:22pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/15 "2019-04-19T16:22:26Z")

</div>

`drone exec` is completely standalone and does not communicate with Drone server in any way. So the fact you have configured a repository as trusted within Drone server has no bearing on how `drone exec` works. It is meant to be a completely independent utility.

---

<div class="post-metadata">

### Author: ![madsonic](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/madsonic/32/6115_2.png) [@madsonic](https://drone.discourse.group/u/madsonic)
#### Post date: [April 20, 2019, 9:57am UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/16 "2019-04-20T09:57:11Z")

</div>

I am not following, aren’t we talking about `drone lint` and `drone info`?

---

<div class="post-metadata">

### Author: ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)
#### Post date: [April 20, 2019, 6:07pm UTC](https://drone.discourse.group/t/linter-untrusted-repositories-cannot-mount-host-volumes/11360/17 "2019-04-20T18:07:33Z")

</div>

`drone lint` is also standalone and does not communicate with the drone server. So the results of `drone info` do not have any bearing on the `drone lint` command.
