search

CodeForPhilly / ops

File an issue here to deploy an application or create a new repo
3 stars 4 forks source link

Persistent volume access #5

Closed lottspot closed 6 years ago

lottspot commented 7 years ago

Project owners need to be able to manage the files on persistent volumes for their containers

lottspot commented 7 years ago

One possible solution is to enable a FTP daemon on the NFS server and create chrooted FTP users which have access to each container's volumes

lottspot commented 7 years ago

I'm thinking we can make it even simpler and just use firejail as account login shells to provide full shell access in a sandbox. This way people can SFTP, rsync, or shell away to their little heart's content with the files on their persistent volumes. It's been a while since I tinkered with firejail; I'll have to toy with it again to make sure it meets all our needs before going gung-ho with it.

lottspot commented 7 years ago

Also, our first project (Yadaguru) doesn't actually need to persist any state to the filesystem, so I'm removing the blocker tag from this issue

lottspot commented 7 years ago

This honestly might not even be worth the effort until someone shows us a need. Going to backburner this task.