nixcfg/cluster/prod
Baptiste Jonglez 7db40a8dcf Fix coturn that was failing with newer Nomad/Docker
Coturn was failing to start with the following error:

failed to create task for container: failed to create shim task: OCI
runtime create failed: runc create failed: unable to start container
process: exec: "/usr/local/bin/docker-entrypoint.sh": permission denied:
unknown

It seems to be caused by the recent NixOS update.

Either because Docker/runc is now more strict when checking if the
entrypoint is executable [1]

And/or because Nomad may mount the secrets directory with "noexec" [2].

In any case, the "local" directory [2] looks more appropriate, because
it's shared with the task while not being accessible to other tasks.

[1] https://github.com/opencontainers/runc/issues/3715
[2] https://developer.hashicorp.com/nomad/docs/concepts/filesystem
2024-04-28 18:01:52 +02:00
..
app Fix coturn that was failing with newer Nomad/Docker 2024-04-28 18:01:52 +02:00
node add ananas, set it raft server instead of dahlia 2023-06-12 13:41:34 +02:00
site prod: update ip config for Free ISP at Neptune 2024-04-20 09:37:24 +02:00
cluster.nix prod: update nomad to 1.6 2024-04-20 12:29:26 +02:00
known_hosts add ananas, set it raft server instead of dahlia 2023-06-12 13:41:34 +02:00
register_external_services.sh remove orsay extra service 2024-03-06 15:15:21 +01:00
secretmgr.toml Update prod secret files 2022-12-25 22:45:05 +01:00
ssh_config add ananas, set it raft server instead of dahlia 2023-06-12 13:41:34 +02:00