justme
83e5120377
Namespaces, assemblies, projects and directories, the solution, binaries, images, systemd units, config paths, environment variables, protocol method names, the media type and the raw chunk magic all move to MoShiro/moshiro. Existing data and deployments are not compatible and must be recreated. Also fix the architecture tests after the solution layout change and make the update tests independent of their order.
33 lines
1000 B
YAML
33 lines
1000 B
YAML
# Docker 和 rootless/rootful Podman 共用。配置、身份和缓存保存在命名 volume 中。
|
||
# docker compose up -d / podman compose up -d（Podman 以普通用户执行即可 rootless）。
|
||
# 首次注册、配置导入和自动更新见 docs/deployment.md。
|
||
services:
|
||
probe:
|
||
image: ${MOSHIRO_IMAGE:-registry.oeo.one/moshiro/moshiro-probe}:${MOSHIRO_VERSION:-0.1.1}
|
||
container_name: moshiro-probe
|
||
restart: unless-stopped
|
||
init: true
|
||
network_mode: host
|
||
volumes:
|
||
- probe-config:/etc/moshiro
|
||
- probe-status:/etc/moshiro/update-status:ro
|
||
- /etc/os-release:/etc/os-release:ro
|
||
read_only: true
|
||
tmpfs:
|
||
- /tmp:rw,noexec,nosuid,size=64m,mode=1777
|
||
security_opt:
|
||
- label=disable
|
||
- no-new-privileges:true
|
||
cap_drop:
|
||
- ALL
|
||
# 要做 ICMP 测量时打开：
|
||
# cap_add:
|
||
# - NET_RAW
|
||
stop_grace_period: 20s
|
||
|
||
volumes:
|
||
probe-config:
|
||
name: moshiro-probe-config
|
||
probe-status:
|
||
name: moshiro-probe-status
|