rollandf / sriov-network-operator

63%

master: 63%

LAST BUILD ON BRANCH empty-dir-ups

branch: empty-dir-ups

CHANGE BRANCH

x

Reset

Sync Branches

• empty-dir-ups
• CVE-2021-20206
• CVE-2022-1996
• CVE-2022-3064
• add-u
• add-u-br
• align-docker
• baseimage
• baseimage25.10
• bp-goproxy
• bridgesecure
• ci-base-branch
• ci-pr-branch
• ci-pr-branch-back
• ci-pr-title
• daemonresult
• delete
• dependabot/docker/golang-1.25
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/labeler-6
• dependabot/github_actions/actions/setup-go-6
• dependabot/github_actions/actions/upload-artifact-5
• dependabot/github_actions/azure/setup-helm-4.3.1
• dependabot/github_actions/coverallsapp/github-action-2.3.6
• dependabot/github_actions/coverallsapp/github-action-2.3.7
• dependabot/github_actions/docker/build-push-action-6
• dependabot/github_actions/docker/setup-buildx-action-3
• dependabot/github_actions/github/codeql-action-4
• dependabot/go_modules/general-dependencies-070606913e
• dependabot/go_modules/general-dependencies-35e5ba6828
• dependabot/go_modules/general-dependencies-5b87cf7aa9
• dependabot/go_modules/general-dependencies-8e0f654415
• dependabot/go_modules/golang.org/x/crypto-0.45.0
• disable-plugins-helm
• docker-again
• dockerarg
• dockerargbp
• dockerbp
• events
• force
• force-backport
• goconst
• goproxy
• gov-ready
• gpg
• hook-affinity
• ignition-cve
• karg-temp
• karg-temp-restore
• labeler
• log-name
• loop
• loop-restore
• master
• mtu-ovs
• nvstaging
• oauth
• oauth2
• oauth3
• otherconfigbp261
• ovs-internal
• revert-grub
• securebridgeovs
• typo
• updates-26.1.x
• webhookport

Build # 21583667104

Build Type

push

github

Committed by rollandf

Commit Message

daemon: mount writable /tmp for mstconfig lockfiles

When running with readOnlyRootFilesystem enabled, mstconfig fails to
create its lockfiles because the path /tmp/mstflint_lockfiles is
hardcoded in the mstflint source code.

This patch adds an emptyDir volume mounted at /tmp to provide a
writable location for these lockfiles while maintaining the security
benefits of a read-only root filesystem for the rest of the container.

Signed-off-by: Fred Rolland <frolland@nvidia.com>

Run Details

9165 of 14483 relevant lines covered (63.28%)

0.7 hits per line