diff options
author | Baptiste Jonglez <git@bitsofnetworks.org> | 2024-04-28 18:01:49 +0200 |
---|---|---|
committer | Baptiste Jonglez <git@bitsofnetworks.org> | 2024-04-28 18:01:52 +0200 |
commit | 7db40a8dcf9cc877553e3127e10295e62fa2d64d (patch) | |
tree | 8af68928feaeca9a9c910cfe19551abe3b637c24 /cluster/prod/cluster.nix | |
parent | c56ce9134cc5f0c1ca1b06499880dd0b06ba263b (diff) | |
download | nixcfg-7db40a8dcf9cc877553e3127e10295e62fa2d64d.tar.gz nixcfg-7db40a8dcf9cc877553e3127e10295e62fa2d64d.zip |
Fix coturn that was failing with newer Nomad/Docker
Coturn was failing to start with the following error:
failed to create task for container: failed to create shim task: OCI
runtime create failed: runc create failed: unable to start container
process: exec: "/usr/local/bin/docker-entrypoint.sh": permission denied:
unknown
It seems to be caused by the recent NixOS update.
Either because Docker/runc is now more strict when checking if the
entrypoint is executable [1]
And/or because Nomad may mount the secrets directory with "noexec" [2].
In any case, the "local" directory [2] looks more appropriate, because
it's shared with the task while not being accessible to other tasks.
[1] https://github.com/opencontainers/runc/issues/3715
[2] https://developer.hashicorp.com/nomad/docs/concepts/filesystem
Diffstat (limited to 'cluster/prod/cluster.nix')
0 files changed, 0 insertions, 0 deletions