We need to start Flexmonster data server on ReadOnly RootFileSystem container.

posted on March 28th, 2024

Answered

Zvika Kushnirski asked on March 28, 2024

Our security team requires that we launch our containers (AKS PODs) with “ReadOnly RootfileSystem”.
When I configure FlexMonster docker like this, leaving only /tmp and the current Flexmonster server/configuration directory R/W, FlexMonster-data-server does not run and immediately crashes without any STDERR.
Our docker platform is UBUNTU 20.04 (Dockerfile: "FROM ubuntu:20.04")

Question: what additional directories must be writable for the data server to work correctly?

3 answers

Public

Nadia Khodakivska ⋅ Flexmonster ⋅ March 28, 2024

Hello Zvika,

Thank you for reaching out to us.

Kindly note that Flexmonster Data Server needs writable permissions for two directories to work properly:
1. The directory where the executable file is located
2. The directory where the configuration json file is located. It has the default location:

On Windows – C:/ProgramData/FlexmonsterDataServer/
On macOS and Ubuntu/Linux – ~/.local/share/FlexmonsterDataServer/ (will resolve to /home/[current_user]/.local/share/FlexmonsterDataServer/)

For more details, please visit our docs: https://www.flexmonster.com/doc/getting-started-with-data-server/#package-structure

Please let us know if the Data Server works well after adding the necessary permissions to the two mentioned directories.

Kind regards,
Nadia

Public

Zvika Kushnirski ⋅ March 31, 2024

Excellent thank you. That helped!

Public

Nadia Khodakivska ⋅ Flexmonster ⋅ April 1, 2024

Hello,

Thank you for the feedback.

We are glad to hear that our answer was helpful!

As always, do not hesitate to contact us if any questions arise.

Kind regards,
Nadia

We need to start Flexmonster data server on ReadOnly RootFileSystem container.

3 answers

Please login or Register to Submit Answer