firewalld in atomic host
by Dusty Mabe
NOTE: if you respond to this message please 'reply-all'.
I'd like to discuss firewalld on atomic host. Recently I was trying to
figure out the best way to explain to other users how to set firewall rules
on atomic host.
Usually I would say add your rules and then iptables-save, but on Atomic
Host docker has added it's firewall rules in there dynamically so if you iptables-save
you'll get a bunch of stuff that you don't want in your static configuration.
There are ways around this; manually create your config file, or use iptables-save
and then rip the docker stuff out. Either way it's a bit of a pain. I think
firewalld would make this easier on the user. Not sure of the pro/con ratio though.
Thoughts?
Dusty
6 years, 1 month
rawhide compoe - error: unlinkat: No such file or directory
by Dusty Mabe
Have we ever seen this before? Comes today's rawhide compose [1]
DEBUG util.py:439: Committing: 100%
DEBUG util.py:439: error: unlinkat: No such file or directory
DEBUG util.py:439: Traceback (most recent call last):
DEBUG util.py:439: File "/usr/bin/pungi-make-ostree", line 15, in <module>
DEBUG util.py:439: ostree.main()
DEBUG util.py:439: File "/usr/lib/python2.7/site-packages/pungi/ostree/__init__.py", line 89, in main
DEBUG util.py:439: func()
DEBUG util.py:439: File "/usr/lib/python2.7/site-packages/pungi/ostree/tree.py", line 99, in run
DEBUG util.py:439: self._make_tree()
DEBUG util.py:439: File "/usr/lib/python2.7/site-packages/pungi/ostree/tree.py", line 46, in _make_tree
DEBUG util.py:439: shortcuts.run(cmd, show_cmd=True, stdout=True, logfile=log_file)
DEBUG util.py:439: File "/usr/lib/python2.7/site-packages/kobo/shortcuts.py", line 335, in run
DEBUG util.py:439: raise RuntimeError(err_msg)
DEBUG util.py:439: RuntimeError: ERROR running command: rpm-ostree compose tree --repo=/mnt/koji/compose/atomic/rawhide/ --write-commitid-to=/mnt/koji/compose/rawhide/Fedora-Rawhide-20170622.n.0/logs/x86_64/Atomic/ostree-3/commitid.log --add-metadata-string=version=Rawhide.20170622.n.0 /mnt/koji/compose/rawhide/Fedora-Rawhide-20170622.n.0/work/ostree-3/config_repo/fedora-atomic-docker-host.json
DEBUG util.py:577: Child return code was: 1
DEBUG util.py:188: kill orphans
[1] - https://koji.fedoraproject.org/koji/taskinfo?taskID=20101234
6 years, 3 months
[atomic-wg] Issue #281: Figure out comprehensive strategy for atomic host
container storage
by Dusty Mabe
dustymabe reported a new issue against the project: `atomic-wg` that you are following:
``
We have system containers storing things in /var/lib/containers/storage. We have docker/moby containers storing things in /var/lib/docker. We might move to overlay2 on a single big root partition in the future, we might not.
We have discussed these topics in a few maililng list threads [[1](https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2017-April/msg00031.html)] [[2]()] and also ran out of storage on atomic host before [[3](https://bugzilla.redhat.com/show_bug.cgi?id=1391725)].
Let's put some thought into this and try to figure out a proper strategy going forward.
``
To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/281
6 years, 4 months