mount by-path directories as read-only

tkatila · tkatila · commit 9b37ef30c869 · 2024-09-09T16:21:39.000+03:00
Signed-off-by: Tuomas Katila &lt;tuomas.katila@intel.com&gt;
diff --git a/cmd/gpu_plugin/gpu_plugin.go b/cmd/gpu_plugin/gpu_plugin.go
@@ -257,7 +257,7 @@ func (dp *devicePlugin) bypathMountsForPci(pciAddress, bypathDir string) []plugi
 			mounts = append(mounts, pluginapi.Mount{
 				ContainerPath: absPath,
 				HostPath:      absPath,
-				ReadOnly:      false,
+				ReadOnly:      true,
 			})
 		}
 	}
@@ -529,7 +529,7 @@ func (dp *devicePlugin) createMountsAndCDIDevices(cardPath, name string, devSpec
 			HostPath:      mount.HostPath,
 			ContainerPath: mount.ContainerPath,
 			Type:          "none",
-			Options:       []string{"bind", "rw"},
+			Options:       []string{"bind", "ro"},
 		})
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -257,7 +257,7 @@ func (dp *devicePlugin) bypathMountsForPci(pciAddress, bypathDir string) []plugi`
`257`	`257`	`mounts = append(mounts, pluginapi.Mount{`
`258`	`258`	`ContainerPath: absPath,`
`259`	`259`	`HostPath: absPath,`
`260`		`- ReadOnly: false,`
	`260`	`+ ReadOnly: true,`
`261`	`261`	`})`
`262`	`262`	`}`
`263`	`263`	`}`
`@@ -529,7 +529,7 @@ func (dp *devicePlugin) createMountsAndCDIDevices(cardPath, name string, devSpec`
`529`	`529`	`HostPath: mount.HostPath,`
`530`	`530`	`ContainerPath: mount.ContainerPath,`
`531`	`531`	`Type: "none",`
`532`		`- Options: []string{"bind", "rw"},`
	`532`	`+ Options: []string{"bind", "ro"},`
`533`	`533`	`})`
`534`	`534`	`}`
`535`	`535`