Comment on Strange cAdvisor Issue

• cass80@programming.dev ⁨9⁩ ⁨months⁩ ago

  My guess is the cleanup process is running as root and clobbers anything it sees regardless of permissions. But that’s a guess. I’ve never tried keeping long term data in tmp.

  source

  • irmadlad@lemmy.world ⁨9⁩ ⁨months⁩ ago

    Sounds plausible. Thank you for your time and response.

    source
• speculate7383@lemmy.today ⁨9⁩ ⁨months⁩ ago

  Why wouldn’t changing to permissions keep the file from being deleted by the internal process?

  That’s like keeping your lunch laying outside on the sidewalk, getting stepped on by people and destroyed, and then wondering if your lunch would be safer if you put it in a stronger bag (but still left it on the sidewalk).

  Don’t leave your lunch outside laying on the sidewalk, regardless of what you might do to “protect” it. Don’t keep important files in /tmp

  source

  • irmadlad@lemmy.world ⁨9⁩ ⁨months⁩ ago

    Don’t leave your lunch outside laying on the sidewalk

    I get that. It would seem tho, you could make the file immutable with sudo chattr +i /tmp/cadvisor/prometheus.yml

    source

    • speculate7383@lemmy.today ⁨9⁩ ⁨months⁩ ago

      Yes, many bad ideas are possible to implement. At least temporarily. Until the next cleanup process figures out how to remove cadvisor dir regardless of file contents. Or the next OS release turns /tmp into a ram disk. Or… or… or…

      Yes, it’s a fun academic exercise to think through possible mitigations. And in the end, it will still be dumb to keep this in /tmp

      source

      • irmadlad@lemmy.world ⁨9⁩ ⁨months⁩ ago

        I was asking in the generic sense, not directly related to the above issue, but thank you.

        source