Mount GMessages configuration read-only

This commit is contained in:
Slavi Pantaleev
2026-08-31 06:54:01 +03:00
parent 7a85db0134
commit a6a9f3fbb3
2 changed files with 3 additions and 3 deletions
@@ -346,13 +346,13 @@
that:
- mautrix_gmessages_config_mount | length > 0
- mautrix_gmessages_config_mount.Source == matrix_bridge_mautrix_gmessages_config_path
- mautrix_gmessages_config_mount.RW
- not mautrix_gmessages_config_mount.RW
- mautrix_gmessages_data_mount | length > 0
- mautrix_gmessages_data_mount.Source == matrix_bridge_mautrix_gmessages_data_path
- mautrix_gmessages_data_mount.RW
- mautrix_gmessages_container.Mounts | length == 2
fail_msg: "The running container does not carry the role's exact config and data mounts"
success_msg: "The running container carries the role's exact config and data mounts"
success_msg: "The running container carries read-only config and writable data mounts"
vars:
mautrix_gmessages_config_mount: >-
{{ mautrix_gmessages_container.Mounts
@@ -23,7 +23,7 @@ ExecStartPre={{ devture_systemd_docker_base_host_command_docker }} create \
--user={{ matrix_user_uid }}:{{ matrix_user_gid }} \
--cap-drop=ALL \
--network={{ matrix_bridge_mautrix_gmessages_container_network }} \
--mount type=bind,src={{ matrix_bridge_mautrix_gmessages_config_path }},dst=/config \
--mount type=bind,src={{ matrix_bridge_mautrix_gmessages_config_path }},dst=/config,ro \
--mount type=bind,src={{ matrix_bridge_mautrix_gmessages_data_path }},dst=/data \
--label-file={{ matrix_bridge_mautrix_gmessages_base_path }}/labels \
--workdir=/data \