Giuseppe Lavagetto has uploaded a new change for review.
https://gerrit.wikimedia.org/r/318058
Change subject: docker::registry: drop setcap
......................................................................
docker::registry: drop setcap
We don't need this given we are serving from nginx now.
Change-Id: Ib267ec6bec881f158a62e2856155e292a020010a
---
M modules/docker/manifests/registry.pp
1 file changed, 0 insertions(+), 8 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/58/318058/1
diff --git a/modules/docker/manifests/registry.pp
b/modules/docker/manifests/registry.pp
index 658fec6..63c563b 100644
--- a/modules/docker/manifests/registry.pp
+++ b/modules/docker/manifests/registry.pp
@@ -80,14 +80,6 @@
notify => Service['docker-registry'],
}
- # Allow docker-registry to bind to 443 despite not running as root
- exec { 'setcap':
- command => '/sbin/setcap "cap_net_bind_service=+ep"
/usr/bin/docker-registry',
- unless => '/sbin/setcap -v "cap_net_bind_service=+ep"
/usr/bin/docker-registry',
- subscribe => Package['docker-registry'],
- notify => Service['docker-registry'],
- }
-
service { 'docker-registry':
ensure => running,
require => File[
--
To view, visit https://gerrit.wikimedia.org/r/318058
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib267ec6bec881f158a62e2856155e292a020010a
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Giuseppe Lavagetto <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
