-
Notifications
You must be signed in to change notification settings - Fork 2.9k
Clean up /var/tmp/ when using oci-archives when creating containers #19265
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Replaces: #19201 |
contrib/tmpfile/podman.conf
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Path in the comment must change as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Waiting on repush, to make sure tests pass. Not sure how important this change would be.
contrib/tmpfile/podman.conf
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why only at boot? I feel like if you have a long running server we can clean these up much earlier. I would even say set this to 1 day.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Well then you would have a risk of someone pulling an image and then systemd kills it.
These should only leak when something is killed, so it should not be that common.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No that is not what tmpfiles does. It will only removes files that are not touched in the last X time.
The date field, when set, is used to decide what files to delete when cleaning. If a file or directory is older than the current time minus the age field, it is deleted.
So I don't see how systemd would ever delete files that are still in use by us.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't see how you can use a timer with a glob to remove files?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah not 100% sure either, I don't have time to look into it but this change works as well so fine for me.
cc71e6e to
66b82ee
Compare
containers We need to remove /var/tmp/container_images_* and /var/tmp/container_images_* which are podman temporary directories on each boot which are created when creating containers from oci-archive tarballs or other pull operations. Signed-off-by: Joe Doss <joe@solidadmin.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
|
Use this PR rather then #19305 |
|
@containers/podman-maintainers PTAL |
Luap99
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
flouthoc
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
/lgtm
/approve
/hold
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: flouthoc, rhatdan The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Why is this revendoring the world? |
|
For some reason, containers/image would not update until I vendored the universe. |
Does this PR introduce a user-facing change?
[NO NEW TESTS NEEDED]