ceph-container: use ceph user and group

Use --setuser and --setgroup to ceph to run daemons with ceph user. Signed-off-by: Seena Fallah <[email protected]> (cherry picked from commit 7016c6d)
ceph · May 17, 2024 · 2485f9f · 2485f9f
1 parent 65a9e0f
commit 2485f9f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/group_vars/all.yml.sample b/group_vars/all.yml.sample
@@ -493,6 +493,8 @@ dummy:
 #    CONTAINER_IMAGE: "{{ ceph_docker_registry }}/{{ ceph_docker_image }}:{{ ceph_docker_image_tag }}"
 #    TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES: "{{ ceph_tcmalloc_max_total_thread_cache }}"
 #  args:
+#    - --setuser=ceph
+#    - --setgroup=ceph
 #    - --default-log-to-file=false
 #    - --default-log-to-stderr=true
 #    - --default-log-stderr-prefix="debug "

diff --git a/roles/ceph-defaults/defaults/main.yml b/roles/ceph-defaults/defaults/main.yml
@@ -485,6 +485,8 @@ ceph_common_container_params:
     CONTAINER_IMAGE: "{{ ceph_docker_registry }}/{{ ceph_docker_image }}:{{ ceph_docker_image_tag }}"
     TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES: "{{ ceph_tcmalloc_max_total_thread_cache }}"
   args:
+    - --setuser=ceph
+    - --setgroup=ceph
     - --default-log-to-file=false
     - --default-log-to-stderr=true
     - --default-log-stderr-prefix="debug "