CT-101 Samba: Ganesha-Pidfile im ReadOnly-Container fixen (-p /run/ganesha.pid)

- ganesha.nfsd startete im Quadlet-Container nicht: FATAL open(
  /var/run/ganesha/ganesha.pid) ENOENT — /run ist im Container eine leere
  rw-Tmpfs (ReadOnly=true), das Default-Pidfile-Verzeichnis existiert nicht
- Fix: -p /run/ganesha.pid in der Containerfile-CMD (CLI-Option, per
  ganesha.nfsd -p im Image verifiziert); /run selbst ist rw und existiert
- Containerfile-Checksum neu gepinnt (54cf9cae..., 2026-10-30) in
  samba_nfs-Default und allen drei Inventaren; Image wird beim nächsten
  Lauf automatisch neu gebaut (Label-Vergleich)

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
This commit is contained in:
2026-10-30 15:21:35 +01:00
parent f77d973b22
commit 0979f62ae2
5 changed files with 10 additions and 6 deletions
@@ -19,4 +19,8 @@ LABEL eu.selfhost.ghostnet.stack="samba" \
eu.selfhost.ghostnet.role="nfs-export" \
eu.selfhost.ghostnet.base-digest="sha256:918311b7b6c4c6f68b232ba516584925f6c78ad82b6fd534b98979df6438e483"
CMD ["/usr/bin/ganesha.nfsd", "-F", "-f", "/etc/ganesha/ganesha.conf", "-L", "/dev/stderr"]
# -p /run/ganesha.pid: the container runs ReadOnly with /run as a rw tmpfs, so
# the compiled-in default /var/run/ganesha/ganesha.pid is not writable there
# (the directory does not exist -> ENOENT at startup). /run itself exists and
# is writable. Verified with ganesha.nfsd -p on 2026-10-30.
CMD ["/usr/bin/ganesha.nfsd", "-F", "-f", "/etc/ganesha/ganesha.conf", "-L", "/dev/stderr", "-p", "/run/ganesha.pid"]
@@ -271,4 +271,4 @@ samba_nfs_build_directory: /var/lib/ghostnet/samba/build
samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
samba_nfs_containerfile_sha256: >-
0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
@@ -271,4 +271,4 @@ samba_nfs_build_directory: /var/lib/ghostnet/samba/build
samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
samba_nfs_containerfile_sha256: >-
0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
@@ -271,4 +271,4 @@ samba_nfs_build_directory: /var/lib/ghostnet/samba/build
samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
samba_nfs_containerfile_sha256: >-
0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
@@ -4,9 +4,9 @@ samba_nfs_quadlet_directory: /etc/containers/systemd
samba_nfs_build_directory: /var/lib/ghostnet/samba/build
samba_nfs_config_directory: /etc/ghostnet/samba/ganesha
samba_nfs_state_directory: /var/lib/ghostnet/samba/ganesha
# Reviewed checksum of ../../Containerfile.ganesha (sha256sum, 2026-10-20):
# Reviewed checksum of ../../Containerfile.ganesha (sha256sum, 2026-10-30):
samba_nfs_containerfile_sha256: >-
0fdbe6b5fe542f22ed291c4cabe505e0da472024f0186e2414fd002b751f784f
54cf9cae60b3a3849d61213e5892f8ec14a2c8bdffeed2c8586ff727c73aef73
samba_nfs_source_image: >-
docker.io/library/debian:trixie-slim@sha256:918311b7b6c4c6f68b232ba516584925f6c78ad82b6fd534b98979df6438e483
samba_nfs_runtime_tag: localhost/ghostnet/ganesha:trixie-ansible1