Do not load dm-multipath module from the container

The module must be loaded from the host directly in order
to avoid any SELinux issues.

There are examples in kolla-ansible and tripleo-heat-templates:
- https://review.openstack.org/#/c/605624/
- https://review.openstack.org/#/c/605450/

Change-Id: Ieebb2564e816d83ec4111c211677f0a44488a224
Related-Bug: 1794550
This commit is contained in:
Cédric Jeanneret 2018-09-26 17:09:59 +02:00
parent 6d405cc9ad
commit 74d8e65040
3 changed files with 4 additions and 5 deletions

View File

@ -13,8 +13,5 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build
{{ macros.install_packages(multipathd_packages | customizable("packages")) }}
COPY extend_start.sh /usr/local/bin/kolla_extend_start
RUN chmod 755 /usr/local/bin/kolla_extend_start
{% block multipathd_footer %}{% endblock %}
{% block footer %}{% endblock %}

View File

@ -1,2 +0,0 @@
#!/bin/bash
modprobe dm-multipath

View File

@ -0,0 +1,4 @@
---
upgrade:
- Remove kernel module loading from within containers. This must now be done
on the host directly.