runsc: allow to build runsc-race with code coverage instrumentation

PiperOrigin-RevId: 828670954

Author: avagin

runsc/BUILD

@@ -93,5 +93,28 @@ go_cov(
         "\"$(location //:go.mod)\" " +
         "\"$(location //:go.sum)\" " +
         "\"$(location main.go)\" " +
-        "\"$(location //tools:go-allow-internal.patch)\" ",
+        "\"$(location //tools:go-allow-internal.patch)\" " +
+        "\"false\" ",
+)
+
+go_cov(
+    name = "runsc_race_coverage",
+    srcs = [
+        "main.go",
+        "//:go.mod",
+        "//:go.sum",
+        "//:gopath",
+        "//tools:build_cover.sh",
+        "//tools:go-allow-internal.patch",
+    ],
+    outs = ["runsc_race_cov"],
+    cmd =
+        "\"$(location //tools:build_cover.sh)\" " +
+        "\"$(location //runsc:runsc_race_cov)\" " +
+        "\"$(location //:gopath)\" " +
+        "\"$(location //:go.mod)\" " +
+        "\"$(location //:go.sum)\" " +
+        "\"$(location main.go)\" " +
+        "\"$(location //tools:go-allow-internal.patch)\" " +
+        "\"true\" ",
 )

tools/build_cover.sh

@@ -22,6 +22,7 @@ go_mod="$3"
 go_sum="$4"
 runsc_main_go="$5"
 golang_patch=$(realpath "$6")
+race="$7"
 
 mkdir .gocache
 GOMODCACHE="$(pwd)/.gocache"
@@ -48,5 +49,15 @@ mkdir -p "$gvisor_gopath/src/gvisor.dev/gvisor/runsc"
 cp "$runsc_main_go" "$gvisor_gopath/src/gvisor.dev/gvisor/runsc/main.go"
 cd "$gvisor_gopath/src/gvisor.dev/gvisor/"
 export GOROOT="$goroot_dir"
+go_opts=""
+go_tags="kcov,opensource"
+if [[ "$race" = true ]]; then
+  go_opts="-race"
+  go_tags="$go_tags,lockdep"
+else
+  # runsc has to be a self-contained binary to be able to run it in a minimal
+  # mount namespace.
+  export CGO_ENABLED=0
+fi
 gopkgs=$("$go_tool" list ./... | grep -v pkg/sentry/platform | grep -v pkg/ring0 | grep -v pkg/coverage | paste -sd,)
-"$go_tool" build --tags kcov,opensource -cover -coverpkg="$gopkg" -covermode=atomic -o "$dst" runsc/main.go
+"$go_tool" build --tags "$go_tags" $go_opts -cover -coverpkg="$gopkg" -covermode=atomic -o "$dst" runsc/main.go