dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

r/bitwarden_rs: Fix EROFS when starting container

Browse Source 
Even with `Network=host`, Podman tries to write to
`/etc/containers/network` for some reason.  Fortunately, it doesn't
actually need to, so we can trick it into working by mounting an empty
*tmpfs* filesystem there.
This commit is contained in:
Dustin
2024-05-28 08:25:08 -05:00
parent 4c0d5bb473
commit af295cec1b
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/bitwarden_rs/templates/vaultwarden.service.j2
View File

@@ -18,6 +18,7 @@ ExecStart=/usr/bin/podman run \
--uidmap 1:100000:65536 \ --uidmap 1:100000:65536 \
--gidmap 1:100000:65536 \ --gidmap 1:100000:65536 \
docker.io/vaultwarden/server:latest docker.io/vaultwarden/server:latest
TemporaryFileSystem=/etc/containers/networks
SuccessExitStatus=143 SuccessExitStatus=143
ProtectSystem=full ProtectSystem=full
UMask=0077 UMask=0077