vault/command/server
Guy J Grigsby 08c5a52b02
disable_mlock must now be explicitly included in config (#29974)
* require explicit value for disable_mlock

* set disable_mlock back to true for all docker tests

* fix build error

* update test config files

* change explicit mlock check to apply to integrated storage only.

* formatting and typo fixes

* added test for raft

* remove erroneous test

* remove unecessary doc line

* remove unecessary var

* pr suggestions

* test compile fix

* add mlock config value to enos tests

* enos lint

* update enos tests to pass disable_mlock value

* move mlock error to runtime to check for env var

* fixed mlock config detection logic

* call out mlock on/off tradeoffs to docs

* rewording production hardening section on mlock for clarity

* update error message when missing disable_mlock value to help customers with the previous default

* fix config doc error and update production-hardening doc to align with existing recommendations.

* remove extra check for mlock config value

* fix docker recovery test

* Update changelog/29974.txt

Explicitly call out that Vault will not start without disable_mlock included in the config.

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>

* more docker test experimentation.

* passing disable_mlock into test cluster

* add VAULT_DISABLE_MLOCK envvar to docker tests and pass through the value

* add missing envvar for docker env test

* upate additional docker test disable_mlock values

* Apply suggestions from code review

Use active voice.

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
2025-04-17 15:35:40 +02:00
..
test-fixtures disable_mlock must now be explicitly included in config (#29974) 2025-04-17 15:35:40 +02:00
config_custom_response_headers_test.go Prepare code base for Go 1.24 update. (#29412) 2025-01-27 14:34:07 -05:00
config_oss_test.go [COMPLIANCE] License changes (#22290) 2023-08-10 18:14:03 -07:00
config_oss.go Add a configuration flag for enabling multiseal (Seal HA), CE side (#25908) 2024-03-22 14:23:05 +00:00
config_telemetry_test.go [VAULT-17826] Remove mount point from rollback metrics (#22400) 2023-08-21 16:55:37 +02:00
config_test_helpers_stubs_oss.go [COMPLIANCE] License changes (#22290) 2023-08-10 18:14:03 -07:00
config_test_helpers.go VAULT-34581: retry_join: handle escapes in auto_join config (#29874) 2025-03-07 22:20:58 +00:00
config_test.go VAULT-33008: ipv6: always display RFC-5952 §4 conformant addresses (#29228) 2025-01-27 14:14:28 -07:00
config_util_test.go Move Request Limiter to enterprise (#25615) 2024-02-27 16:24:06 -05:00
config_util.go Add a configuration flag for enabling multiseal (Seal HA), CE side (#25908) 2024-03-22 14:23:05 +00:00
config.go VAULT-34581: retry_join: handle escapes in auto_join config (#29874) 2025-03-07 22:20:58 +00:00
hcp_link_config_test.go [COMPLIANCE] License changes (#22290) 2023-08-10 18:14:03 -07:00
listener_tcp_test.go VAULT-6803: fix listener issue if using proxy_protocol_behavior with deny_unauthorized for untrusted upstream connections (#27589) 2024-06-26 07:52:13 +00:00
listener_tcp.go VAULT-33758: IPv6 address conformance for proxy and agent (#29517) 2025-02-27 15:57:46 -07:00
listener_test.go VAULT-6803: fix listener issue if using proxy_protocol_behavior with deny_unauthorized for untrusted upstream connections (#27589) 2024-06-26 07:52:13 +00:00
listener_unix_test.go Switch from mitchellh/cli to hashicorp/cli (#24239) 2023-12-04 11:05:02 -08:00
listener_unix.go Switch from mitchellh/cli to hashicorp/cli (#24239) 2023-12-04 11:05:02 -08:00
listener.go add gosimport to make fmt and run it (#25383) 2024-02-13 14:07:02 -08:00
server_seal_transit_acc_test.go [COMPLIANCE] License changes (#22290) 2023-08-10 18:14:03 -07:00
server_stubs_oss.go Relplat 897 copywrite fixes for mutliple licenses (#23722) 2023-10-20 08:40:43 -07:00
tls_util_test.go Relplat 897 copywrite fixes for mutliple licenses (#23722) 2023-10-20 08:40:43 -07:00
tls_util.go Add -dev-tls-san flag (#22657) 2023-08-31 23:31:42 +01:00