Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore /proc/sys/fs/binfmt_misc by default #7650

Merged
merged 3 commits into from
Sep 24, 2020
Merged

Ignore /proc/sys/fs/binfmt_misc by default #7650

merged 3 commits into from
Sep 24, 2020

Conversation

@codecov
Copy link

codecov bot commented Sep 24, 2020

mx-psi
mx-psi previously approved these changes Sep 24, 2020
Copy link
Member

@mx-psi mx-psi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM as long as we are sure that this is not a breaking change for any user. Note that #7378 already adds an option to ignore this and other non-physical mount points.

pducolin
pducolin previously approved these changes Sep 24, 2020
Copy link
Contributor

@hithwen hithwen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you rename blacklist to exclude?

@mx-psi
Copy link
Member

mx-psi commented Sep 24, 2020

Can you rename blacklist to exclude?

@hithwen we are taking care of that on a separate PR: #7627

Copy link
Contributor

@albertvaka albertvaka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This won't work on the containerized Agent. It should be /host/proc/sys/fs/binfmt_misc instead there.

About the naming: I would keep blacklist here so it's consistent with the other config options, and would rename them all for the next release as part of the PR mentioned above ^.

@mx-psi
Copy link
Member

mx-psi commented Sep 24, 2020

This won't work on the containerized Agent. It should be /host/proc/sys/fs/binfmt_misc instead there.

Maybe we should exclude by filesystem instead of mountpoint then?

@@ -16,7 +16,8 @@ init_config:
## @param mount_point_global_blacklist - list of strings - optional
## Instruct the check to always add these patterns to `mount_point_blacklist`.
#
# mount_point_global_blacklist: []
# mount_point_global_blacklist:
# - /proc/sys/fs/binfmt_misc$
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we add a comment that overriding this value will introduce possible problems on systems using systemd?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, dunno if a comment in description for each would scale long term. WDYT?

@ofek ofek dismissed stale reviews from pducolin and mx-psi via 54a400d September 24, 2020 15:51
@mgarabed mgarabed merged commit 91888a4 into master Sep 24, 2020
@mgarabed mgarabed deleted the ofek/d branch September 24, 2020 18:47
mgarabed pushed a commit that referenced this pull request Sep 24, 2020
* Ignore `/proc/sys/fs/binfmt_misc` by default

* address

* add warning
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants