[Koha-bugs] [Bug 27844] koha-worker systemd service should run as %i-koha in package install

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Wed Mar 3 01:04:23 CET 2021


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27844

--- Comment #4 from David Cook <dcook at prosentient.com.au> ---
Alternative (more secure) systemd inspired by
https://developers.redhat.com/blog/2016/09/13/running-systemd-in-a-non-privileged-container/:

Systemd in container (insecurely):
0. Build an image FROM koha/koha-testing:master
1. Install systemd and systemd-sysv
2. CMD ["/sbin/init"]
3. Update your docker-compose file to use this new systemd image for koha
container
4. Update your docker-compose file to have a volume
"/sys/fs/cgroup:/sys/fs/cgroup:ro" for the koha container
5. Enter into the koha container and run /kohadevbox/run.sh by hand
6. systemctl daemon-reload
7. service koha-common stop
8. service koha-common start

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list