thumbnail: Fix slow thumbnailer due to missing font cache
On some distributions, the font cache doesn't live in /usr but in /var,
which we don't allow access to when sandboxing the thumbnailers. Bind
mount the fontconfig cache directory read-only if it lives outside /usr,
to speed up thumbnailer startup.
thumbnail: Fix runtime warning getting a preview icon
If we tried to get a preview thumbnail for a file, but that preview icon
did not exist, then we'd generate a warning trying to add a reference to
that GIcon.
ci: Fix CI problems caused by uninstalled glib2 translations
The glib2 Hebrew translations were not getting installed since an update
in the Fedora Docker image which blocked any non-English translations
from being installed. Even though the glibc Hebrew translations were
unaffected, the glib2 one still was, causing half of the wall clock to
be translated (glibc-provided strings) and half not (glib2-provided
strings).
With help from Ray Strode.
77d37aa...
by
Mart Raudsepp <email address hidden>
thumbnail: bind mount /etc/ld.so.cache to the sandbox
This is especially important for libstdc++ on distributions that
don't have it directly in a libdir and the runtime linker doesn't
look where needed without /etc/ld.so.cache (e.g. if libstdc++ is
in a GCC per-version subdirectory handled via /etc/ld.so.conf.d/).
If /etc/ld.so.cache is not available, the runtime linker will look
only at a set of predetermined paths - as seen with LD_DEBUG=libs
added to the bwrap call with "--setenv LD_DEBUG libs":
