search

ucphhpc / docker-migrid

Containerized MiG
GNU General Public License v2.0
3 stars 6 forks source link

Expose gdp.log in state/log/ on sensitive data sites #29

Closed jonasbardino closed 1 year ago

jonasbardino commented 1 year ago

On sensitive data sites (enable_gdp) we have an extra gdp.log, which keeps track of all user operations. We have generally configured it to use (r)syslog and write logged entries in /var/log/mig/gdp.log. Since containers expose /var/log/ under log/CONTAINER/ on the host it is already available on the host in log/CONTAINER/mig/gdp.log for each container on such GDP-sites. However, we received a request for moving the log into state/log/ along with the other migrid logs, and it should be possible to adjust the docker-migrid rsyslog conf to write there instead.

jonasbardino commented 1 year ago

Please test c7e061ab8c648d9f94808dc7c35b49e4affb1820 or later for a sensitive data site setup (i.e. ENABLE_GDP=True in the .env file).

jonasbardino commented 1 year ago

Just for the record the current docker-migrid version sets up log writing both to the previous individual log/CONTAINER/mig/gdp.log and the new shared state/log/gdp.log location. We can discuss if this should remain the case of course.