forked from tangled.org/core
Monorepo for Tangled — https://tangled.org

spindle/engine: mount /tmp as world-writeable

Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>

anirudh.fi 935b6304 3a3a98e0

verified
Changed files
+7 -4
spindle
engine
+7 -4
spindle/engine/engine.go
···
select {
case <-waitDone:
-
// container finished normally
-
stepCancel()
// wait for tailing to complete
<-tailDone
+
stepCancel()
case <-stepCtx.Done():
e.l.Warn("step timed out; killing container", "container", resp.ID, "timeout", stepTimeout)
···
Target: "/nix",
},
{
-
Type: mount.TypeTmpfs,
-
Target: "/tmp",
+
Type: mount.TypeTmpfs,
+
Target: "/tmp",
+
ReadOnly: false,
+
TmpfsOptions: &mount.TmpfsOptions{
+
Mode: 0o1777, // world-writeable sticky bit
+
},
},
},
ReadonlyRootfs: false,