mirror of
https://github.com/alexbelgium/hassio-addons.git
synced 2026-08-10 07:02:29 +02:00
c1b171104f
Both add-ons failed because their AppArmor profiles did not list
`capability sys_chroot`, which AppArmor then denied even though it is
part of Docker's default capability set:
- gitea: sshd privilege-separation chroot("/var/empty") failed with
"Operation not permitted [preauth]", breaking git-over-SSH (#2653)
- elasticsearch: upstream startup chroot failed with
"chroot: cannot change root directory" (#2709)
Also rename the elasticsearch AppArmor profile from the copy-pasted
`inadyn_addon` (shared with several other add-ons) to
`elasticsearch_addon` to avoid profile-name collisions.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V7P3Nbem7n9FqGTXrLMadP
94 lines
1.6 KiB
YAML
94 lines
1.6 KiB
YAML
arch:
|
|
- aarch64
|
|
- amd64
|
|
description: Free and Open, Distributed, RESTful Search Engine
|
|
devices:
|
|
- /dev/dri
|
|
- /dev/dri/card0
|
|
- /dev/dri/card1
|
|
- /dev/dri/renderD128
|
|
- /dev/vchiq
|
|
- /dev/video10
|
|
- /dev/video11
|
|
- /dev/video12
|
|
- /dev/video13
|
|
- /dev/video14
|
|
- /dev/video15
|
|
- /dev/video16
|
|
- /dev/ttyUSB0
|
|
- /dev/sda
|
|
- /dev/sdb
|
|
- /dev/sdc
|
|
- /dev/sdd
|
|
- /dev/sde
|
|
- /dev/sdf
|
|
- /dev/sdg
|
|
- /dev/nvme
|
|
- /dev/nvme0
|
|
- /dev/nvme0n1
|
|
- /dev/nvme0n1p1
|
|
- /dev/nvme0n1p2
|
|
- /dev/nvme0n1p3
|
|
- /dev/nvme1n1
|
|
- /dev/nvme1n1p1
|
|
- /dev/nvme1n1p2
|
|
- /dev/nvme1n1p3
|
|
- /dev/nvme2n1
|
|
- /dev/nvme2n1p1
|
|
- /dev/nvme2n1p2
|
|
- /dev/nvme2n3p3
|
|
- /dev/mmcblk
|
|
- /dev/fuse
|
|
- /dev/sda1
|
|
- /dev/sdb1
|
|
- /dev/sdc1
|
|
- /dev/sdd1
|
|
- /dev/sde1
|
|
- /dev/sdf1
|
|
- /dev/sdg1
|
|
- /dev/sda2
|
|
- /dev/sdb2
|
|
- /dev/sdc2
|
|
- /dev/sdd2
|
|
- /dev/sde2
|
|
- /dev/sdf2
|
|
- /dev/sdg2
|
|
- /dev/sda3
|
|
- /dev/sdb3
|
|
- /dev/sda4
|
|
- /dev/sdb4
|
|
- /dev/sda5
|
|
- /dev/sda6
|
|
- /dev/sda7
|
|
- /dev/sda8
|
|
- /dev/nvme0
|
|
- /dev/nvme1
|
|
- /dev/nvme2
|
|
environment:
|
|
ES_JAVA_OPTS: -Xms1024M -Xmx1024M
|
|
TINI_SUBREAPER: "true"
|
|
bootstrap.memory_lock: "true"
|
|
discovery.type: single-node
|
|
host_network: true
|
|
image: ghcr.io/alexbelgium/elasticsearch-{arch}
|
|
map:
|
|
- config:rw
|
|
name: Elasticsearch server
|
|
options:
|
|
env_vars: []
|
|
ports:
|
|
9200/tcp: 9200
|
|
9300/tcp: 9300
|
|
ports_description:
|
|
9200/tcp: API calls over HTTP
|
|
9300/tcp: custom binary protoco
|
|
schema:
|
|
env_vars:
|
|
- name: match(^[A-Za-z0-9_]+$)
|
|
value: str?
|
|
slug: elasticsearch
|
|
startup: services
|
|
udev: true
|
|
url: https://github.com/alexbelgium/hassio-addons/tree/master/elasticsearch
|
|
version: 8.14.3-3
|