jack/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: remove promtail nested /var/log/traefik volume mount
All checks were successful
CI/CD / syntax-check (push) Successful in 1m9s
Details
CI/CD / deploy (push) Successful in 15m33s
Details

Browse source 
Docker cannot mount to /var/log/traefik when /var/log is already
bind-mounted (read-only). The nested mount fails with 'read-only
file system' error in the overlay upper layer.

The mount was unused anyway — promtail config only reads syslog,
auth.log, and Docker container logs via the socket.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
jack 2026-03-22 15:55:39 +07:00
parent 6279bcb9b4
commit 2b5524f258
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
roles/services/templates/docker-compose.yml.j2
View file

@ -526,7 +526,6 @@ services:
- /var/log:/var/log:ro - /var/log:/var/log:ro
- /var/lib/docker/containers:/var/lib/docker/containers:ro - /var/lib/docker/containers:/var/lib/docker/containers:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
- {{ services_root }}/traefik/logs:/var/log/traefik:ro
- {{ services_root }}/loki/promtail.yml:/etc/promtail/config.yml:ro - {{ services_root }}/loki/promtail.yml:/etc/promtail/config.yml:ro
command: -config.file=/etc/promtail/config.yml command: -config.file=/etc/promtail/config.yml