Skip to content

Commit e755be8

Browse files
committed
maybe fix tmpfs bug
1 parent 0c44a6c commit e755be8

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

saturn/pkg/run/scaffold.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -213,8 +213,8 @@ func (s *Scaffold) initContainer(ctx context.Context) error {
213213
ReadOnlyRootFS: true,
214214
Mounts: []string{
215215
fmt.Sprintf("%s:/workspace:rw", scaffoldHostPath),
216-
"tmpfs:/tmp:rw,noexec,nosuid,size=1g", // Writable temp directory
217-
"tmpfs:/workspace/.gradle:rw,noexec,nosuid,size=512m", // Gradle cache
216+
"tmpfs:/tmp:noexec,nosuid,size=1g", // Writable temp directory
217+
"tmpfs:/workspace/.gradle:noexec,nosuid,size=512m", // Gradle cache
218218
},
219219
CapabilitiesToDrop: []string{"ALL"},
220220
CapabilitiesToAdd: []string{"CHOWN", "SETUID", "SETGID", "DAC_OVERRIDE"},

0 commit comments

Comments
 (0)