Florian Mickler
|
2317916f93
|
fix file upload in selinux enabled environments
docker-compose.yml:
:z on volume mounts relabels the directory to enable access for all docker container
:Z on volume mounts relabels the directory to enable access for this specific docker container
Some background:
https://www.projectatomic.io/blog/2015/06/using-volumes-with-docker-can-cause-problems-with-selinux/
https://docs.docker.com/release-notes/docker-compose/ (-> Syntax introduced in v1.4.0 from 2015-08-04)
Since these volumes are designed only for use by webodm a relabeling to allow docker containers to have access seems resonable.
webodm/settings.py:
The change in webodm/settings.py is necessary, because else the webapp will create big upload files in /tmp and move them to the final destination afterwards. Which means they will have container specific MCS context selinux labels applied to them. If the tmp files are created under MEDIA_ROOT, which has the :z labels applied to it, the files will get a label that is accessible from all docker containers.
Some background:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/sect-security-enhanced_linux-working_with_selinux-selinux_contexts_labeling_files
|
2020-01-30 23:10:41 +01:00 |
olivierdalang
|
62d193dd70
|
[docker] fix #758 (container not restarting on host reboot)
|
2019-12-05 00:10:33 +01:00 |
Piero Toffanin
|
8bc15e4562
|
WO_DEV tweaks
|
2019-07-01 12:02:31 -04:00 |
Piero Toffanin
|
303ab6fbb6
|
Removed timeouts from wait-for-it, set worker to wait for webapp
|
2018-06-26 21:08:59 -04:00 |
Piero Toffanin
|
271d62ddac
|
Removed unsupported docker-compose configs
|
2018-04-22 15:08:11 -04:00 |
Piero Toffanin
|
8317283b87
|
Faster timeout on update_node_info(), oom preferences
|
2018-04-22 14:49:20 -04:00 |
Piero Toffanin
|
38c8db0037
|
Changed DEBUG default, added restart on failure on all services
|
2018-04-19 14:45:33 -04:00 |
Piero Toffanin
|
f310826f14
|
Updated docker-compose versions to 2.1
|
2018-04-05 10:51:14 -04:00 |
Piero Toffanin
|
1c02b886c5
|
Dockerfile fix
|
2018-02-17 14:09:47 -05:00 |
Piero Toffanin
|
47dad9b370
|
Merged master
|
2018-02-16 11:15:36 -05:00 |
Piero Toffanin
|
ff7c83dc03
|
Added worker dep
|
2018-02-16 10:43:53 -05:00 |
Piero Toffanin
|
17621e39b2
|
Added wait-for-postgres, changed docker-compose files
|
2018-02-16 10:18:56 -05:00 |
Piero Toffanin
|
22c3e66c02
|
Removed scheduler code, background decorator, added Celery workers, migrated code, added SharedTestWatch
|
2018-02-15 16:23:29 -05:00 |
Piero Toffanin
|
d9f4f1527c
|
Proof of concept celery worker working with redis
|
2018-02-14 17:13:32 -05:00 |
Piero Toffanin
|
9329e345d1
|
Started drafting Dockerfile orchestration for worker/broker
|
2018-02-13 19:38:54 -05:00 |
Piero Toffanin
|
9c40f2d31b
|
Updated readme, django debug and ssl settings
|
2017-11-18 10:55:22 -05:00 |
Piero Toffanin
|
6709a2c270
|
Environment vars fix, execute permissions fix
|
2017-11-17 14:56:24 -05:00 |
Piero Toffanin
|
6353b5cc39
|
Added WO_ prefix to env vars
|
2017-11-17 14:43:06 -05:00 |
Piero Toffanin
|
a2b8267cd5
|
Environmental variables, nginx templates
|
2017-11-16 19:19:19 -05:00 |
Piero Toffanin
|
e04348b93a
|
Changed repo from pierotofy to opendronemap, increased version number
|
2017-06-16 11:21:12 -04:00 |
Piero Toffanin
|
8f8cb0d4af
|
Modified docker-compose instructions to pull prebuilt images
|
2017-06-15 16:38:04 -04:00 |
Piero Toffanin
|
545833e007
|
Solved bin/bash: bad interpreter issue
|
2017-06-07 17:18:29 -04:00 |
Piero Toffanin
|
9b3f0843d0
|
Persistent data and media volumes after webodm update
|
2017-03-08 12:16:02 -05:00 |
Piero Toffanin
|
8b4baf9e75
|
Submodule path fix, docker-compose changes
|
2017-03-08 11:21:16 -05:00 |
Piero Toffanin
|
5a10da6861
|
removed slash
|
2017-03-08 10:42:53 -05:00 |
Piero Toffanin
|
b2a9d4360e
|
Added back docker volume to root webodm directory
|
2017-03-08 10:28:14 -05:00 |
Piero Toffanin
|
835c2dc105
|
Started adding option to download textured model from download options
|
2017-03-08 09:55:19 -05:00 |
Piero Toffanin
|
cd1fdd48f4
|
Python version check, docker-compose with nodeodm instance
|
2016-12-01 10:39:42 -05:00 |
Piero Toffanin
|
d688c60b49
|
React setup, ajax retrieval example, live reload, auto SCSS compile
|
2016-10-11 13:42:17 -04:00 |
Piero Toffanin
|
0c3f589b1f
|
Reverted some changes, added data volume for node_modules dir
|
2016-10-05 16:31:46 -04:00 |
Piero Toffanin
|
fa01ff4a2c
|
Changed port string to use auto assignment (travis build fails because the port is in use)
|
2016-10-05 13:07:47 -04:00 |
Piero Toffanin
|
0759c6d441
|
Fixed a problem with docker compose permissions on Linux systems
|
2016-09-27 16:54:16 -04:00 |
Piero Toffanin
|
c5ca26e7c1
|
Added docker-compose support
|
2016-09-11 19:52:31 -04:00 |