-
Notifications
You must be signed in to change notification settings - Fork 4.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support setting plugin TMPDIR in config as well as env #24978
Conversation
Build Results: |
CI Results: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does this need a changelog entry?
type PluginCatalogInput struct { | ||
Logger log.Logger | ||
BuiltinRegistry BuiltinRegistry | ||
CatalogView logical.Storage | ||
PluginDirectory string | ||
Tmpdir string | ||
EnableMlock bool | ||
PluginRuntimeCatalog *PluginRuntimeCatalog | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
Thanks for the reminder, added one in the latest commit. |
Thanks! |
To run containerized plugins under systemd with PrivateTmp=true, users need control over the tmpdir used for Unix sockets (see #23215). Previously we supported this solely with a
VAULT_PLUGIN_TMPDIR
env var, and this PR adds the option to the config file as well. As with other settings supported in config and env, the env takes precedence.