config-files/systemd-config
Leonardo Fagundes Luz Serrano f1e378fe5c Setup fluxcd's log dir and logrotate
- Armada has been replaced by Fluxcd, so the logrotate config can
be adapted.

- An entry was added to /etc/tmpfiles.d to create /var/log/flux
during boot. Some more context in [1].

- About the owner:group:
The flux container processes are associated with the user:group
'nobody:nogroup' as defined in their Dockerfiles [2,3], which is
a default user with very restricted privileges [4].
Since /var/log is owned by root, it does not allow flux to write files.
To circumvent that, /var/log/flux has its ownership set to match
the container processes.

[1] https://review.opendev.org/c/starlingx/config-files/+/859666
[2] https://github.com/fluxcd/source-controller/blob/v0.32.1/Dockerfile#L87
[3] https://github.com/fluxcd/helm-controller/blob/v0.27.0/Dockerfile#L44
[4] https://wiki.debian.org/SystemGroups

Test Plan:
PASS build custom iso and install. Flux log dir exists
     and has right owner:group.
PASS logs rotate

Partial-Bug: 2009784

Signed-off-by: Leonardo Fagundes Luz Serrano <Leonardo.FagundesLuzSerrano@windriver.com>
Change-Id: I8bf8bf5f42c78d6ddab8f0d65e6ffaff9a8ec555
2023-03-17 15:24:49 +00:00
..
centos Add automatic cleanup for puppet reports files 2022-02-24 20:07:22 -05:00
debian Update debian package versions to use git commits 2023-02-15 08:52:24 -08:00
files Add automatic cleanup for puppet reports files 2022-02-24 20:07:22 -05:00
source-debian Setup fluxcd's log dir and logrotate 2023-03-17 15:24:49 +00:00