mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-23 15:31:05 +02:00
Added fleet user and group, added polkit rule for fleet
This commit is contained in:
parent
a1d2b6207f
commit
536238e58f
@ -0,0 +1,6 @@
|
||||
polkit.addRule(function(action, subject) {
|
||||
if (action.id.indexOf("org.freedesktop.systemd1.") == 0 &&
|
||||
subject.user == "fleet") {
|
||||
return polkit.Result.YES;
|
||||
}
|
||||
});
|
@ -8,6 +8,7 @@ Wants=fleet.socket
|
||||
After=fleet.socket
|
||||
|
||||
[Service]
|
||||
User=fleet
|
||||
Environment=GOMAXPROCS=1
|
||||
ExecStart=/usr/bin/fleetd
|
||||
Restart=always
|
||||
|
@ -4,4 +4,6 @@ PartOf=fleet.service
|
||||
|
||||
[Socket]
|
||||
ListenStream=/var/run/fleet.sock
|
||||
|
||||
SocketMode=0660
|
||||
SocketUser=fleet
|
||||
SocketGroup=fleet
|
||||
|
4
sdk_container/src/third_party/coreos-overlay/app-admin/fleet/files/sysusers.d/fleet.conf
vendored
Normal file
4
sdk_container/src/third_party/coreos-overlay/app-admin/fleet/files/sysusers.d/fleet.conf
vendored
Normal file
@ -0,0 +1,4 @@
|
||||
# create fleet user and group
|
||||
u fleet 253 - -
|
||||
# add core to fleet group
|
||||
m core fleet - -
|
1
sdk_container/src/third_party/coreos-overlay/app-admin/fleet/files/tmpfiles.d/fleet.conf
vendored
Normal file
1
sdk_container/src/third_party/coreos-overlay/app-admin/fleet/files/tmpfiles.d/fleet.conf
vendored
Normal file
@ -0,0 +1 @@
|
||||
d /var/run/fleet 0750 fleet fleet - -
|
@ -34,6 +34,15 @@ src_install() {
|
||||
|
||||
systemd_dounit "${FILESDIR}"/${PN}.service
|
||||
systemd_dounit "${FILESDIR}"/${PN}.socket
|
||||
systemd_dotmpfilesd "${FILESDIR}/tmpfiles.d/${PN}.conf"
|
||||
|
||||
# Grant systemd1 access for fleet user
|
||||
insinto /usr/share/polkit-1/rules.d
|
||||
doins "${FILESDIR}"/98-fleet-org.freedesktop.systemd1.rules
|
||||
|
||||
# Install sysusers.d snippet which adds fleet group and adds core user into it
|
||||
insinto /usr/lib/sysusers.d/
|
||||
newins "${FILESDIR}"/sysusers.d/${PN}.conf ${PN}.conf
|
||||
|
||||
coreos-dodoc -r Documentation/*
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user