Browse Source

Add /var/lib/kolla/venv/bin to Zun exec_dirs

This is necessary for rootwrap/privsep to work properly

Change-Id: I128fb04a5ddeb77428697d33e2015158bc74738f
changes/54/606854/1
Hongbin Lu 3 years ago
parent
commit
570a6120be
  1. 3
      docker/zun/zun-base/Dockerfile.j2

3
docker/zun/zun-base/Dockerfile.j2

@ -52,7 +52,8 @@ RUN ln -s zun-base-source/* zun \
&& mkdir -p /etc/zun /var/www/cgi-bin/zun \
&& cp -r /zun/etc/zun/* /etc/zun/ \
&& cp /zun/zun/api/app.wsgi /var/www/cgi-bin/zun \
&& chown -R zun: /etc/zun /var/www/cgi-bin/zun
&& chown -R zun: /etc/zun /var/www/cgi-bin/zun \
&& sed -i 's|^exec_dirs.*|exec_dirs=/var/lib/kolla/venv/bin,/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin|g' /etc/zun/rootwrap.conf
{% endif %}

Loading…
Cancel
Save