opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-08-02 17:22:30 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #16826 from alexlarsson/quadlet-more-defaults

Browse Source 
quadlet: Default VolatileTmp to off
This commit is contained in:
OpenShift Merge Robot
2022-12-14 10:35:41 -05:00
committed by GitHub
parent ad5c0be6b2 fd92a68071
commit 2a48296b0b
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/source/markdown/podman-systemd.unit.5.md
View File

@ -194,9 +194,9 @@ The timezone to run the container in.
If enabled, the container will have a minimal init process inside the If enabled, the container will have a minimal init process inside the
container that forwards signals and reaps processes. container that forwards signals and reaps processes.
#### `VolatileTmp=` (default to `yes`) #### `VolatileTmp=` (default to `no`, or `yes` if `ReadOnly` enabled)
If enabled (and it is by default), the container will have a fresh tmpfs mounted on `/tmp`. If enabled, the container will have a fresh tmpfs mounted on `/tmp`.
**NOTE:** Podman will automatically copy any content from the image onto the tmpfs **NOTE:** Podman will automatically copy any content from the image onto the tmpfs

3
pkg/systemd/quadlet/quadlet.go
View File

@ -329,8 +329,7 @@ func ConvertContainer(container *parser.UnitFile, isUser bool) (*parser.UnitFile
podman.add("--read-only") podman.add("--read-only")
} }
// We want /tmp to be a tmpfs, like on rhel host volatileTmp := container.LookupBoolean(ContainerGroup, KeyVolatileTmp, false)
volatileTmp := container.LookupBoolean(ContainerGroup, KeyVolatileTmp, true)
if volatileTmp { if volatileTmp {
/* Read only mode already has a tmpfs by default */ /* Read only mode already has a tmpfs by default */
if !readOnly { if !readOnly {

1
test/e2e/quadlet/readwrite.container
View File

@ -3,4 +3,5 @@
[Container] [Container]
Image=localhost/imagename Image=localhost/imagename
VolatileTmp=yes
ReadOnly=no ReadOnly=no