fix(docker-compose): remove /mnt and /root (#4115)

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
This commit is contained in:
Stavros Kois
2022-10-16 21:41:13 +02:00
committed by GitHub
parent 551cbc6515
commit a3b1362968
3 changed files with 30 additions and 36 deletions
+1 -1
View File
@@ -21,7 +21,7 @@ sources:
- https://github.com/truecharts/charts/tree/master/charts/stable/docker-compose - https://github.com/truecharts/charts/tree/master/charts/stable/docker-compose
- https://hub.docker.com/_/docker - https://hub.docker.com/_/docker
type: application type: application
version: 2.0.52 version: 2.1.0
annotations: annotations:
truecharts.org/catagories: | truecharts.org/catagories: |
- docker - docker
+15 -14
View File
@@ -11,17 +11,18 @@ questions:
# Include{controllerExpert} # Include{controllerExpert}
# Include{controllerExpertExtraArgs} # Include{controllerExpertExtraArgs}
- variable: env - variable: env
group: "Container Configuration" group: Container Configuration
label: "Image Environment" label: Image Environment
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
- variable: COMPOSE_FILE - variable: COMPOSE_FILE
label: "COMPOSE_FILE" label: Docker Compose File
description: "Path on the host of the composefile you want to load. Supported are paths inside /mnt, /root and /cluster" description: Path on the host of the compose file you want to load. You MUST mount the storage yourself
schema: schema:
type: string type: string
default: ""
# Include{containerConfig} # Include{containerConfig}
# Include{serviceExpertRoot} # Include{serviceExpertRoot}
default: true default: true
@@ -32,42 +33,42 @@ questions:
# Include{security} # Include{security}
# Include{securityContextAdvancedRoot} # Include{securityContextAdvancedRoot}
- variable: privileged - variable: privileged
label: "Privileged mode" label: Privileged mode
schema: schema:
type: boolean type: boolean
default: true default: true
- variable: readOnlyRootFilesystem - variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem" label: ReadOnly Root Filesystem
schema: schema:
type: boolean type: boolean
default: false default: false
- variable: allowPrivilegeEscalation - variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation" label: Allow Privilege Escalation
schema: schema:
type: boolean type: boolean
default: true default: true
- variable: runAsNonRoot - variable: runAsNonRoot
label: "runAsNonRoot" label: runAsNonRoot
schema: schema:
type: boolean type: boolean
default: false default: false
# Include{securityContextAdvanced} # Include{securityContextAdvanced}
# Include{podSecurityContextRoot} # Include{podSecurityContextRoot}
- variable: runAsUser - variable: runAsUser
label: "runAsUser" label: runAsUser
description: "The UserID of the user running the application" description: The UserID of the user running the application
schema: schema:
type: int type: int
default: 0 default: 0
- variable: runAsGroup - variable: runAsGroup
label: "runAsGroup" label: runAsGroup
description: "The groupID this App of the user running the application" description: The groupID this App of the user running the application
schema: schema:
type: int type: int
default: 0 default: 0
- variable: fsGroup - variable: fsGroup
label: "fsGroup" label: fsGroup
description: "The group that should own ALL storage." description: The group that should own ALL storage.
schema: schema:
type: int type: int
default: 0 default: 0
+14 -21
View File
@@ -46,26 +46,26 @@ service:
type: HTTPS type: HTTPS
env: env:
DOCKER_TLS_CERTDIR: "/certs" DOCKER_TLS_CERTDIR: /certs
COMPOSE_FILE: "" COMPOSE_FILE: ""
lifecycle: lifecycle:
postStart: postStart:
exec: exec:
command: command:
- "/bin/bash" - /bin/bash
- "-c" - -c
- | - |
if [ "${COMPOSE_FILE}" ]; then if [ "${COMPOSE_FILE}" ]; then
counter=0; counter=0;
while ! docker info > /dev/null 2>&1 && [[ ${counter} -lt 10 ]]; do while ! docker info > /dev/null 2>&1 && [[ ${counter} -lt 10 ]]; do
echo "docker not running yet. Waiting..." >> /proc/1/fd/1; echo "docker not running yet. Waiting..." >> /proc/1/fd/1;
sleep 5; sleep 5;
counter=$((counter+1)); counter=$((counter+1));
done done
docker-compose -f "${COMPOSE_FILE}" up -d && echo "Loading COMPOSE_FILE at location ${COMPOSE_FILE}" >> /proc/1/fd/1; docker-compose -f "${COMPOSE_FILE}" up -d && echo "Loading COMPOSE_FILE at location ${COMPOSE_FILE}" >> /proc/1/fd/1;
else else
echo "COMPOSE_FILE not set, not auto-loading compose-file" >> /proc/1/fd/1; echo "COMPOSE_FILE not set, not auto-loading compose-file" >> /proc/1/fd/1;
fi fi
probes: probes:
liveness: liveness:
@@ -81,24 +81,17 @@ probes:
persistence: persistence:
varrun: varrun:
enabled: false enabled: false
root:
enabled: true
type: hostPath
hostPath: /root
mountPath: /root
hostPathType: ""
readOnly: false
docker-certs-ca: docker-certs-ca:
enabled: true enabled: true
mountPath: "/config" mountPath: /config
volumeClaimTemplates: volumeClaimTemplates:
docker-certs-client: docker-certs-client:
enabled: true enabled: true
mountPath: "/certs/client" mountPath: /certs/client
docker: docker:
enabled: true enabled: true
mountPath: "/var/lib/docker" mountPath: /var/lib/docker
portal: portal:
enabled: false enabled: false