Disable PrivateTmp=True in httpd.service for ODCS frontend.

The NFS share with /mnt/koji is automounted and can expired after some time.
System then refreshes the expired NFS share, but this does not work correctly
with private filesystem namespace which is enabled by httpd using PrivateTmp=True.

This leads to httpd using expired NFS storage and httpd therefore cannot serve
files from this storage.
This commit is contained in:
Jan Kaluža 2018-11-06 05:54:48 +00:00
parent 656106be4d
commit 234625903a

View file

@ -41,6 +41,18 @@
- odcs
- odcs/frontend
- name: Disable PrivateTmp=true in httpd.service.
lineinfile:
path: /usr/lib/systemd/system/httpd.service
regexp: '^PrivateTmp'
line: 'PrivateTmp=false'
notify:
- systemctl daemon-reload
- restart httpd service
tags:
- odcs
- odcs/frontend
- name: ensure selinux lets httpd talk to postgres
seboolean: name={{item}} state=yes persistent=yes
with_items: