julien.rbrt.fr
forked from
tangled.org/core
Monorepo for Tangled — https://tangled.org
spindle/engine: mount /tmp as world-writeable
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>
anirudh.fi
+7
-4
spindle/engine/engine.go
+7
-4
spindle/engine/engine.go
···
253
254
select {
255
case <-waitDone:
256
-
// container finished normally
257
-
stepCancel()
258
259
// wait for tailing to complete
260
<-tailDone
261
262
case <-stepCtx.Done():
263
e.l.Warn("step timed out; killing container", "container", resp.ID, "timeout", stepTimeout)
···
491
Target: "/nix",
492
},
493
{
494
-
Type: mount.TypeTmpfs,
495
-
Target: "/tmp",
496
},
497
},
498
ReadonlyRootfs: false,
···
253
254
select {
255
case <-waitDone:
256
257
// wait for tailing to complete
258
<-tailDone
259
+
stepCancel()
260
261
case <-stepCtx.Done():
262
e.l.Warn("step timed out; killing container", "container", resp.ID, "timeout", stepTimeout)
···
490
Target: "/nix",
491
},
492
{
493
+
Type: mount.TypeTmpfs,
494
+
Target: "/tmp",
495
+
ReadOnly: false,
496
+
TmpfsOptions: &mount.TmpfsOptions{
497
+
Mode: 0o1777, // world-writeable sticky bit
498
+
},
499
},
500
},
501
ReadonlyRootfs: false,