From 591436817af26272a7168557f811e39e1bb41f8c Mon Sep 17 00:00:00 2001 From: Andrey Smirnov Date: Mon, 13 Nov 2023 21:12:40 +0400 Subject: [PATCH] fix: enable rootfs propagation for stargz-snapshotter See https://github.com/siderolabs/talos/pull/7953 Signed-off-by: Andrey Smirnov --- container-runtime/stargz-snapshotter/manifest.yaml | 2 +- container-runtime/stargz-snapshotter/stargz-snapshotter.yaml | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/container-runtime/stargz-snapshotter/manifest.yaml b/container-runtime/stargz-snapshotter/manifest.yaml index fbfd408b..c7d9b18c 100644 --- a/container-runtime/stargz-snapshotter/manifest.yaml +++ b/container-runtime/stargz-snapshotter/manifest.yaml @@ -7,4 +7,4 @@ metadata: This system extension provides Stargz Snapshotter using containerd's runtime handler. compatibility: talos: - version: ">= v1.0.0" + version: ">= v1.6.0" diff --git a/container-runtime/stargz-snapshotter/stargz-snapshotter.yaml b/container-runtime/stargz-snapshotter/stargz-snapshotter.yaml index e07d005d..9a71832b 100644 --- a/container-runtime/stargz-snapshotter/stargz-snapshotter.yaml +++ b/container-runtime/stargz-snapshotter/stargz-snapshotter.yaml @@ -8,6 +8,8 @@ container: args: - --address=/var/run/containerd-stargz-grpc/containerd-stargz-grpc.sock - --log-level=debug + security: + rootfsPropagation: shared mounts: - source: /etc/ssl destination: /etc/ssl