quine-global-labs/mirror-coreos-fedora-coreos-config
1
0
Fork 0
mirror of https://github.com/coreos/fedora-coreos-config.git synced 2026-11-03 14:49:47 -09:00
Code Issues Projects Releases Packages Wiki Activity

rpm-ostreed: use env var rather than bind mounting

Browse source 
Rather than using a bind mount so that rpm-ostreed has the correct
containers policy, we can use the CONTAINERS_POLICY_JSON environment
variable.
This commit is contained in:
Angel Cervera Roldan 2026-08-25 10:40:23 +00:00 committed by Dusty Mabe
parent 32ad171704
commit 90eeb04bfd
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
overlay.d/17fcos-container-signing/usr/lib/systemd/system/rpm-ostreed.service.d/coreos-containers-policy.conf
View file

@ -1,7 +1,7 @@
# Bind mount in our containers policy.json that configures
# how to do signature verification for quay.io/fedora/fedora-coreos
# Point rpm-ostree at our containers policy.json that configures
# container image signature verification
# Remove this override with:
# mkdir /etc/systemd/system/rpm-ostreed.service.d
# ln -s /dev/null /etc/systemd/system/rpm-ostreed.service.d/coreos-containers-policy.conf
[Service]
BindReadOnlyPaths=/usr/lib/coreos/coreos-containers-policy.json:/etc/containers/policy.json
Environment=CONTAINERS_POLICY_JSON=/usr/lib/coreos/coreos-containers-policy.json