hashipi

Raspberry Pi Test Cluster for HashiCorp Vault, Nomad and Consul
git clone https://git.in0rdr.ch/hashipi.git
Log | Files | Refs | README

commit 482416df282f743b336f824e0ab3f500c62501d4
parent 8775707ad76f82fcde874b7e231878dea3b4424b
Author: Andreas Gruhler <andreas.gruhler@adfinis.com>
Date:   Wed, 10 Jul 2024 00:47:35 +0200

feat(chroot_env): add /opt for bao tls

Diffstat:
Mnomad.sh | 13+++++++++++++
1 file changed, 13 insertions(+), 0 deletions(-)

diff --git a/nomad.sh b/nomad.sh @@ -122,6 +122,19 @@ client { # memory to reserve, in MB memory = 256 } + + # Allow to chroot the /opt directory to renew bao tls certificates: + # https://developer.hashicorp.com/nomad/docs/configuration/client#chroot_env-parameters + chroot_env { + "/bin/ls" = "/bin/ls" + "/etc/ld.so.cache" = "/etc/ld.so.cache" + "/etc/ld.so.conf" = "/etc/ld.so.conf" + "/etc/ld.so.conf.d" = "/etc/ld.so.conf.d" + "/etc/passwd" = "/etc/passwd" + "/lib" = "/lib" + "/lib64" = "/lib64" + "/opt" = "/opt" + } } # Enable raw exec driver (jobs w/o isolation)