ci: Add unprivileged compose test

This should all work with preceeding commits, let's start testing
it.

Closes: coreos#1329

.papr.yml

@@ -112,6 +112,15 @@ tests:
     -v $(pwd):/srv/code -w /srv/code
     registry.fedoraproject.org/fedora:27 /bin/sh -c
     "./ci/build.sh && make install && ./tests/compose"
+  # And now one that isn't --privileged https://github.com/projectatomic/rpm-ostree/issues/1329
+  - docker run --rm --security-opt seccomp=unconfined
+    --security-opt label=type:spc_t \
+    -e RPMOSTREE_COMPOSE_TEST_USE_REPOS=/etc/yum.repos.d.host
+    -v /etc/yum.repos.d:/etc/yum.repos.d.host:ro
+    -v $(pwd):/srv/code -w /srv/code
+    registry.fedoraproject.org/fedora:27 /bin/sh -c
+    "./ci/build.sh && make install && env TESTS=basic ./tests/compose"
+
 
 artifacts:
   - test-compose-logs