[gnome-music/wip/jfelder/3-34-unprivileged-ci] CI: Update to run as unprivileged

[Jean Felder <jfelder src gnome org>]

commit 2002cbbd34c4a6fb58017104c3b2ddcabad42d59
Author: Jean Felder <jfelder src gnome org>
Date:   Fri Feb 21 11:55:30 2020 +0100

    CI: Update to run as unprivileged
    
    There is no default image for the runner. An image needs to be
    specified in order to install flake8.

 .gitlab-ci.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)
---
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 88b15236..3b39b9a8 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -14,11 +14,13 @@ variables:
 
 flatpak:
   stage: build-flatpak
+  tags:
+    - flatpak
   script:
-    - flatpak-builder --stop-at=${FLATPAK_MODULE} app ${MANIFEST_PATH}
+    - flatpak-builder --user --disable-rofiles-fuse --stop-at=${FLATPAK_MODULE} app ${MANIFEST_PATH}
     - flatpak build app meson --prefix=/app _build
     - flatpak build app ninja -C _build install
-    - flatpak-builder --finish-only --repo=repo app ${MANIFEST_PATH}
+    - flatpak-builder --user --disable-rofiles-fuse --finish-only --repo=repo app ${MANIFEST_PATH}
     - flatpak build-bundle repo ${BUNDLE} --runtime-repo=${RUNTIME_REPO} ${DBUS_ID}
   artifacts:
     paths:
@@ -60,6 +62,7 @@ stop_review:
         - tags
 
 flake8:
+  image: fedora:28
   stage: check
   script:
     - dnf install -y python3-flake8