How to specifc exec on volumeMount

up vote
0
down vote

favorite

We have OpenShift 3.9 running in our Cluster.
I currently am trying out the Pipeline capabilities of OpenShift. It turns out the default recipies for Jenkins are not working.
The problem is that the volumeMount specified in the dc leads to a noexec mount in the Container. When the Jenkins git plugin is then trying to execute its ssh wrapper in /var/lib/jenkins it of course fails.

The config they use in the dc is:

  volumes:

    - emptyDir: {}

      name: jenkins-data

and then mount it via:

      volumeMounts:

        - mountPath: /var/lib/jenkins

          name: jenkins-data

I could not find any option to configure which mount options are to be used in the container.
Is there any way to work around that?

asked Nov 9 at 12:28

abergmeier

4,83773063

My suggestion would be to look at a persistent volume instead of emptyDir, at least see if that solves the issue. I didn't see anything obviosiy about noexec when looking at the api docs for emptyDir.
– Will Gordon
Nov 9 at 13:19

I also PV is good idea than emptyDir, because emptyDir can not adjust the mount option, refer emptyDir with medium: Memory mounts a tmpfs volume without nosuid,nodev,noexec at now.
– Daein Park
Nov 10 at 12:58

add a comment |

up vote
0
down vote

favorite

The config they use in the dc is:

  volumes:

    - emptyDir: {}

      name: jenkins-data

and then mount it via:

      volumeMounts:

        - mountPath: /var/lib/jenkins

          name: jenkins-data

I could not find any option to configure which mount options are to be used in the container.
Is there any way to work around that?

asked Nov 9 at 12:28

abergmeier

4,83773063

My suggestion would be to look at a persistent volume instead of emptyDir, at least see if that solves the issue. I didn't see anything obviosiy about noexec when looking at the api docs for emptyDir.
– Will Gordon
Nov 9 at 13:19

I also PV is good idea than emptyDir, because emptyDir can not adjust the mount option, refer emptyDir with medium: Memory mounts a tmpfs volume without nosuid,nodev,noexec at now.
– Daein Park
Nov 10 at 12:58

add a comment |

up vote
0
down vote

favorite

The config they use in the dc is:

  volumes:

    - emptyDir: {}

      name: jenkins-data

and then mount it via:

      volumeMounts:

        - mountPath: /var/lib/jenkins

          name: jenkins-data

I could not find any option to configure which mount options are to be used in the container.
Is there any way to work around that?

asked Nov 9 at 12:28

abergmeier

4,83773063

The config they use in the dc is:

  volumes:

    - emptyDir: {}

      name: jenkins-data

and then mount it via:

      volumeMounts:

        - mountPath: /var/lib/jenkins

          name: jenkins-data

I could not find any option to configure which mount options are to be used in the container.
Is there any way to work around that?

openshift openshift-enterprise

asked Nov 9 at 12:28

abergmeier

4,83773063

asked Nov 9 at 12:28

abergmeier

4,83773063

asked Nov 9 at 12:28

abergmeier

4,83773063

asked Nov 9 at 12:28

abergmeier

4,83773063

asked Nov 9 at 12:28

abergmeier

4,83773063

My suggestion would be to look at a persistent volume instead of emptyDir, at least see if that solves the issue. I didn't see anything obviosiy about noexec when looking at the api docs for emptyDir.
– Will Gordon
Nov 9 at 13:19

I also PV is good idea than emptyDir, because emptyDir can not adjust the mount option, refer emptyDir with medium: Memory mounts a tmpfs volume without nosuid,nodev,noexec at now.
– Daein Park
Nov 10 at 12:58

add a comment |

My suggestion would be to look at a persistent volume instead of emptyDir, at least see if that solves the issue. I didn't see anything obviosiy about noexec when looking at the api docs for emptyDir.
– Will Gordon
Nov 9 at 13:19

I also PV is good idea than emptyDir, because emptyDir can not adjust the mount option, refer emptyDir with medium: Memory mounts a tmpfs volume without nosuid,nodev,noexec at now.
– Daein Park
Nov 10 at 12:58

My suggestion would be to look at a persistent volume instead of emptyDir, at least see if that solves the issue. I didn't see anything obviosiy about noexec when looking at the api docs for emptyDir.
– Will Gordon
Nov 9 at 13:19

I also PV is good idea than emptyDir, because emptyDir can not adjust the mount option, refer emptyDir with medium: Memory mounts a tmpfs volume without nosuid,nodev,noexec at now.
– Daein Park
Nov 10 at 12:58

add a comment |

active

oldest

votes

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});

}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53225732%2fhow-to-specifc-exec-on-volumemount%23new-answer', 'question_page');
}
);

Post as a guest

Name

Required, but never shown

active

oldest

votes

draft saved

draft discarded

Thanks for contributing an answer to Stack Overflow!

Please be sure to answer the question. Provide details and share your research!

But avoid …

Asking for help, clarification, or responding to other answers.

Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.

Some of your past answers have not been well-received, and you're in danger of being blocked from answering.

Please pay close attention to the following guidance:

Please be sure to answer the question. Provide details and share your research!

But avoid …

Asking for help, clarification, or responding to other answers.

Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Name

Required, but never shown

Name

Required, but never shown

This page is only for reference, If you need detailed information, please check here

搜尋此網誌

Wsrtjtyk