commit 482416df282f743b336f824e0ab3f500c62501d4 parent 8775707ad76f82fcde874b7e231878dea3b4424b Author: Andreas Gruhler <andreas.gruhler@adfinis.com> Date: Wed, 10 Jul 2024 00:47:35 +0200 feat(chroot_env): add /opt for bao tls Diffstat:
M | nomad.sh | | | 13 | +++++++++++++ |
1 file changed, 13 insertions(+), 0 deletions(-)
diff --git a/nomad.sh b/nomad.sh @@ -122,6 +122,19 @@ client { # memory to reserve, in MB memory = 256 } + + # Allow to chroot the /opt directory to renew bao tls certificates: + # https://developer.hashicorp.com/nomad/docs/configuration/client#chroot_env-parameters + chroot_env { + "/bin/ls" = "/bin/ls" + "/etc/ld.so.cache" = "/etc/ld.so.cache" + "/etc/ld.so.conf" = "/etc/ld.so.conf" + "/etc/ld.so.conf.d" = "/etc/ld.so.conf.d" + "/etc/passwd" = "/etc/passwd" + "/lib" = "/lib" + "/lib64" = "/lib64" + "/opt" = "/opt" + } } # Enable raw exec driver (jobs w/o isolation)