mirror of https://github.com/ceph/ceph-ansible.git
dashboard: run node_export as privileged container
Typical error:
```
type=AVC msg=audit(1575367499.582:3210): avc: denied { search } for pid=26680 comm="node_exporter" name="1" dev="proc" ino=11528 scontext=system_u:system_r:container_t:s0:c100,c1014 tcontext=system_u:system_r:init_t:s0 tclass=dir permissive=0
```
node_exporter needs to be run as privileged to avoid avc denied error
since it gathers lot of information on the host.
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1762168
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
(cherry picked from commit d245eb7e7d
)
pull/4847/head
parent
0340929ed3
commit
6295a33912
|
@ -12,6 +12,7 @@ After=network.target
|
|||
EnvironmentFile=-/etc/environment
|
||||
ExecStartPre=-/usr/bin/{{ container_binary }} rm -f node-exporter
|
||||
ExecStart=/usr/bin/{{ container_binary }} run --rm --name=node-exporter \
|
||||
--privileged \
|
||||
-v /proc:/host/proc:ro -v /sys:/host/sys:ro \
|
||||
--net=host \
|
||||
{{ node_exporter_container_image }} \
|
||||
|
|
Loading…
Reference in New Issue