• Dimitris Aragiorgis's avatar
    deploy: Use synnefo system user and group · 280ecf72
    Dimitris Aragiorgis authored
    
    
    In short make gunicorn and snf-dispatcher run as
    synnefo:synnefo, and Archipelago as archipelago:synnefo.
    
    This way the synnefo components that run as synnefo:synnefo
    (Cyclades, Pithos, etc.) can access the backing storage only through
    Archipelago (i.e. named pipes in /dev/shm/posixfd/) and not
    directly.
    
    Since we are using NFS we let archipelago user and synnefo group
    with common uid and gid respectively across all nodes. The
    Archipelago dir to be exported will be owned by archipelago:synnefo
    and have group write permissions.
    Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
    280ecf72
archipelago.conf 2.74 KB