Bug 54562 - Allow to define the tempfs's which are to be created for an app
Allow to define the tempfs's which are to be created for an app
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: App Center
UCS 5.0
Other Mac OS X 10.1
: P5 normal (vote)
: UCS 5.0-1-errata
Assigned To: Ole Schwiegert
Dirk Wiesenthal
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-03-16 20:45 CET by Ole Schwiegert
Modified: 2022-06-08 20:23 CEST (History)
1 user (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ole Schwiegert univentionstaff 2022-03-16 20:45:05 CET
The App Center creates tempfs for /run and /run/lock for every docker app.

Since we want to use s6 init system in some UCS@school apps we need the /run dir to be executable. Per default tempfs are noexec.

It would be great to have a way to influence which tempfs are created how for certain apps.
Comment 1 Ole Schwiegert univentionstaff 2022-03-16 21:30:49 CET
Implemented in https://git.knut.univention.de/univention/ucs/-/merge_requests/310

It is now possible to add the DockerTmpfs setting to the apps ini file, which is a list of tmpfs's. The default is set to the old /run, /run/lock
Comment 2 Dirk Wiesenthal univentionstaff 2022-03-23 09:55:53 CET
OK: No regression, old installations work
OK: New parameter can be set and changes the "docker create" command
OK: YAML

VERIFIED