-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ignore /proc/sys/fs/binfmt_misc
by default
#7650
Conversation
Codecov Report
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM as long as we are sure that this is not a breaking change for any user. Note that #7378 already adds an option to ignore this and other non-physical mount points.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you rename blacklist to exclude?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This won't work on the containerized Agent. It should be /host/proc/sys/fs/binfmt_misc
instead there.
About the naming: I would keep blacklist here so it's consistent with the other config options, and would rename them all for the next release as part of the PR mentioned above ^.
Maybe we should exclude by filesystem instead of mountpoint then? |
@@ -16,7 +16,8 @@ init_config: | |||
## @param mount_point_global_blacklist - list of strings - optional | |||
## Instruct the check to always add these patterns to `mount_point_blacklist`. | |||
# | |||
# mount_point_global_blacklist: [] | |||
# mount_point_global_blacklist: | |||
# - /proc/sys/fs/binfmt_misc$ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we add a comment that overriding this value will introduce possible problems on systems using systemd
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hmm, dunno if a comment in description for each would scale long term. WDYT?
* Ignore `/proc/sys/fs/binfmt_misc` by default * address * add warning
Motivation