search

freedomofpress / securethenews

An automated scanner and web dashboard for tracking TLS deployment across news organizations
https://securethe.news
GNU Affero General Public License v3.0
102 stars 25 forks source link

Readonly rootfs #200

Closed msheiny closed 5 years ago

msheiny commented 5 years ago

Tweaks code-base to allow running the prod container with readonly mode. Note that a fun discovery towards the end of this process was realizing that green unicorn requires a filesystem to write heartbeat data to. Ended up using a tmpfs volume for this - we'll see how that shakes out under kubernetes.

msheiny commented 5 years ago

It was mentioned out of band that CI was barfing and not giving you proper output. I totally believe that and it should be fixed - but just flagging the current error in Circle is

No Django settings specified.
Unknown command: 'collectstatic'
Type 'manage.py help' for usage.
msheiny commented 5 years ago

rebased on cdc3a84e7ee4e35bc238df707b08b2506ceb4de1

msheiny commented 5 years ago

Please also review https://github.com/freedomofpress/django-logging/pull/5 as part of this