openstack/kolla
Code Issues Proposed changes

Add /var/lib/kolla/venv/bin to Zun exec_dirs

Browse Source 
This is necessary for rootwrap/privsep to work properly

Change-Id: I128fb04a5ddeb77428697d33e2015158bc74738f
This commit is contained in:
Hongbin Lu 2018-09-30 16:14:31 +00:00
parent 1e2db34c7f
commit 570a6120be
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docker/zun/zun-base/Dockerfile.j2
View File

@ -52,7 +52,8 @@ RUN ln -s zun-base-source/* zun \
&& mkdir -p /etc/zun /var/www/cgi-bin/zun \
&& cp -r /zun/etc/zun/* /etc/zun/ \
&& cp /zun/zun/api/app.wsgi /var/www/cgi-bin/zun \
&& chown -R zun: /etc/zun /var/www/cgi-bin/zun
&& chown -R zun: /etc/zun /var/www/cgi-bin/zun \
&& sed -i 's|^exec_dirs.*|exec_dirs=/var/lib/kolla/venv/bin,/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin|g' /etc/zun/rootwrap.conf
{% endif %}