Another option for scanning on startup#16
Open
Josh5 wants to merge 8 commits into
Open
Conversation
The stack template should run the dmm process with `--rm`. Then when the swarm service is stopped, it will also terminate the dmm process.
When a host restarts, there is no guarantee that this service will start before the ones that you want to have modified. This then leads to those started containers not having the required permissions to access the /dev nodes. This update runs a quick parse over the running containers and for each of them with a /dev mount, it will apply the device rules.
Lets just run it with an entrypoint script to simplify the compose template
Run scan on startup
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Thanks for this project.
This PR is much the same as the other PR. This one has some improvements to the way the container is run also. With this changeset I was trying to simplify the deployment process a bit and also include the required changes for running a scan of running containers on startup.