Commit graph

6 commits

Author SHA1 Message Date
Baptiste Jonglez
66b2a88826 prod: Allow bespin for all services 2025-04-16 00:29:42 +02:00
Baptiste Jonglez
1d817399eb coturn: Fix wrong DNS config for IPv6 (the CNAME pointed to the machine hosting Tricot, which is incorrect for TURN) 2025-04-12 12:34:26 +02:00
Baptiste Jonglez
0b911436ad prod: allow all stateless services on corrin 2024-11-30 01:52:51 +01:00
Baptiste Jonglez
7db40a8dcf Fix coturn that was failing with newer Nomad/Docker
Coturn was failing to start with the following error:

failed to create task for container: failed to create shim task: OCI
runtime create failed: runc create failed: unable to start container
process: exec: "/usr/local/bin/docker-entrypoint.sh": permission denied:
unknown

It seems to be caused by the recent NixOS update.

Either because Docker/runc is now more strict when checking if the
entrypoint is executable [1]

And/or because Nomad may mount the secrets directory with "noexec" [2].

In any case, the "local" directory [2] looks more appropriate, because
it's shared with the task while not being accessible to other tasks.

[1] https://github.com/opencontainers/runc/issues/3715
[2] https://developer.hashicorp.com/nomad/docs/concepts/filesystem
2024-04-28 18:01:52 +02:00
a490f082bc prod: remove all apps from orion, add some missing in scorpio 2023-09-04 19:05:18 +02:00
6b8a94ba2e
wip coturn 2023-03-11 11:44:17 +01:00