justme
2e146d4da7
ci/woodpecker/push/main-amd64-build Pipeline was successful
Namespaces, assemblies, solution, binaries, images, systemd units, config paths, environment variables, protocol methods and the Linux user are all renamed. Breaking: existing databases, node identities and installed units must be recreated.
33 lines
1000 B
YAML
33 lines
1000 B
YAML
# Docker 和 rootless/rootful Podman 共用。配置、身份和缓存保存在命名 volume 中。
|
||
# docker compose up -d / podman compose up -d（Podman 以普通用户执行即可 rootless）。
|
||
# 首次注册、配置导入和自动更新见 docs/deployment.md。
|
||
services:
|
||
probe:
|
||
image: ${MOSHIRO_IMAGE:-registry.oeo.one/moshiro/moshiro-probe}:${MOSHIRO_VERSION:-0.1.1}
|
||
container_name: moshiro-probe
|
||
restart: unless-stopped
|
||
init: true
|
||
network_mode: host
|
||
volumes:
|
||
- probe-config:/etc/moshiro
|
||
- probe-status:/etc/moshiro/update-status:ro
|
||
- /etc/os-release:/etc/os-release:ro
|
||
read_only: true
|
||
tmpfs:
|
||
- /tmp:rw,noexec,nosuid,size=64m,mode=1777
|
||
security_opt:
|
||
- label=disable
|
||
- no-new-privileges:true
|
||
cap_drop:
|
||
- ALL
|
||
# 要做 ICMP 测量时打开：
|
||
# cap_add:
|
||
# - NET_RAW
|
||
stop_grace_period: 20s
|
||
|
||
volumes:
|
||
probe-config:
|
||
name: moshiro-probe-config
|
||
probe-status:
|
||
name: moshiro-probe-status
|