jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-04-04 12:23:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2025-02-23 15:00

Browse Source
This commit is contained in:
Daniel Berteaud 2025-02-23 15:00:09 +01:00
parent db9771645a
commit 409b5b55f2
3 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/seadrive/files/seadrive.te
View File

@ -1,10 +1,10 @@
module seadrive 1.1;
module seadrive 1.2;
require {
type init_t;
type fusermount_exec_t;
class file { open read execute };
class file { open read execute execute_no_trans };
}
#============= init_t ==============
allow init_t fusermount_exec_t:file { open read execute };
allow init_t fusermount_exec_t:file { open read execute execute_no_trans };

4
roles/seadrive/tasks/selinux.yml
View File

@ -17,3 +17,7 @@
command: semodule -i /etc/selinux/targeted/local/seadrive.pp
when: seadrive_selinux_policy.changed
tags: seadrive
- name: Set domain_can_mmap_files
seboolean: name=domain_can_mmap_files state=true persistent=true
tags: seadrive

2
roles/seadrive/templates/seadrive.service.j2
View File

@ -4,7 +4,7 @@ Description=Seafile virtual drive
[Service]
Type=simple
ExecStart=/usr/bin/seadrive -c /etc/seadrive/{{ item.id }}.conf -d {{ item.data_dir | default('/var/cache/seadrive/' + item.id) }} -o {{ item.fuse_opts | default(['allow_other']) | join(',') }} -f -l - {{ item.drive_dir }}
ExecStopPost=!/bin/fusermount -uz {{ item.drive_dir }}
ExecStopPost=-!/bin/fusermount -uz {{ item.drive_dir }}
RestartSec=5
User={{ item.user | default('root') }}
MemoryLimit=1024M