Compare commits
2 Commits
20bf6afee4
...
8427663d71
| Author | SHA1 | Date | |
|---|---|---|---|
| 8427663d71 | |||
| 22472c633d |
@@ -27,7 +27,7 @@ spec:
|
|||||||
- |
|
- |
|
||||||
# 1. Fix data volume permissions
|
# 1. Fix data volume permissions
|
||||||
chown -R 1000:0 /data && chmod -R 775 /data
|
chown -R 1000:0 /data && chmod -R 775 /data
|
||||||
|
|
||||||
# 2. Setup writable SSH tirectory from Secret
|
# 2. Setup writable SSH tirectory from Secret
|
||||||
cp /mnt/keys/authorized_keys /working-ssh/
|
cp /mnt/keys/authorized_keys /working-ssh/
|
||||||
chown 1000:0 /working-ssh/authorized_keys
|
chown 1000:0 /working-ssh/authorized_keys
|
||||||
@@ -37,7 +37,7 @@ spec:
|
|||||||
mountPath: /data
|
mountPath: /data
|
||||||
- name: ssh-keys-secret
|
- name: ssh-keys-secret
|
||||||
mountPath: /mnt/keys
|
mountPath: /mnt/keys
|
||||||
- name: ssh-working
|
- name: ssh-working
|
||||||
mountPath: /working-ssh
|
mountPath: /working-ssh
|
||||||
containers:
|
containers:
|
||||||
- name: clawdbox
|
- name: clawdbox
|
||||||
@@ -76,9 +76,7 @@ spec:
|
|||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
runAsGroup: 1000
|
runAsGroup: 1000
|
||||||
fsGroup: 1000
|
fsGroup: 1000
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: true
|
||||||
capabilities:
|
|
||||||
drop: ["ALL"]
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: data-volume
|
- name: data-volume
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
@@ -88,4 +86,4 @@ spec:
|
|||||||
secretName: clawdbox-ssh-keys
|
secretName: clawdbox-ssh-keys
|
||||||
defaultMode: 0600
|
defaultMode: 0600
|
||||||
- name: ssh-working
|
- name: ssh-working
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
|
|||||||
Reference in New Issue
Block a user