datastax / zdm-proxy-automation

An Ansible-based automation suite to deploy and manage the Zero Downtime Migration Proxy
https://docs.datastax.com/en/astra-serverless/docs/migrate/introduction.html
Apache License 2.0
62 stars 4 forks source link

Docker host root directory is not checked for 'nosuid' flags - which results in deployment failure. #69

Open AndrewHogg opened 11 months ago

AndrewHogg commented 11 months ago

If the docker container root directory has the nosuid flag set on the mount, the use of sudo within the container initialisation script fails. The container reports as being successfully initialised but within the console output is the following, indicating that it has not been successful.

sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?

The fix is to remove the nosuid flag on the mount - a defensive measure within the zdm util script and proxy deployment script would be to check this flag before progressing.

┆Issue is synchronized with this Jira Task by Unito ┆Components: Automation ┆Priority: Major