-
Notifications
You must be signed in to change notification settings - Fork 92
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Docker: podvm image: remove systemd tmpfiles setup delete #2043
Docker: podvm image: remove systemd tmpfiles setup delete #2043
Conversation
We rely on the tempfiles directive to copy allow-all.rego to `/run/peerpods/policy.rego` Fixes: confidential-containers#2041 Signed-off-by: stevenhorsman <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I feel like we should untangle both aspects. One is a bug with the docker provider, the other issue is a regression that we should be able to fix in mkosi one way or the other, possibly with variables in the mkosi or docker builds
So are you proposing that I drop the second commit and ignore it completely, or move it to a different PR? |
f5f12c2
to
0bd0977
Compare
I'd suggest to open an issue regarding the second issue. I suspect we want to keep the ability of specifying policies at build-time |
Done: #2045 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
@stevenhorsman do we need the e2e libvirt test for this PR ? |
Good point - this only impacts the docker provider, so I think we can ignore that |
Merging this as e2 libvirt is not relevant for this PR. |
efadce3
into
confidential-containers:main
Remove the systemd "systemd-tmpfiles-setup.service" -delete
and tidy up docs and code to remove missing features