You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It is best practise to run containers with read-only root filesystem [1], [2].
The only situation were Blaze like to write a file is while loading the RocksDB shared library. However we can mount a tmpfs at this location. Because the shared library will be also executed, the temps has to be mounted with execute option which isn't the default.
The proposed solution would be to use a separate directory vor RocksDB and mount a tmpfs with execute option there.
It is best practise to run containers with read-only root filesystem [1], [2].
The only situation were Blaze like to write a file is while loading the RocksDB shared library. However we can mount a tmpfs at this location. Because the shared library will be also executed, the temps has to be mounted with execute option which isn't the default.
The proposed solution would be to use a separate directory vor RocksDB and mount a tmpfs with execute option there.
The text was updated successfully, but these errors were encountered: