konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

fix(radius): run FreeRADIUS from a non-world-writable config dir #1556

Merged
k.renner merged 2 commits from fix/freeradius-confdir-mode into main 2026-11-04 08:08:25 +00:00
Conversation 0 Commits 2 Files Changed 3
+107 -13
2 Commits
Author SHA1 Message Date
claude-botandClaude Opus 5.5 61fc16ff67 fix(radius): idempotent raddb copy in the init container
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-04 09:05:51 +01:00
claude-botandClaude Opus 5.5 1e785e028e fix(radius): run FreeRADIUS from a copied, non-world-writable raddb 
FreeRADIUS refuses a config dir that is globally writable; the kubelet
projected volume root is. Mount it at /etc/raddb-src, copy it into an
emptyDir with an initContainer and run radiusd from the copy. The test
harness now makes the mount world-writable and runs the initContainer
from the manifest.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-04 09:04:23 +01:00