[BUG] longhorn-manager /usr/local/sbin/ volume and noexec configuration about longhorn HOT 6 CLOSED

@derekbit I have just sent this file by mail. WIth anonymous data.

I'have also create theses PR:

longhorn/longhorn-engine#1135
longhorn/longhorn-instance-manager#526
And this one has been merged yesterday : longhorn/longhorn-manager#2893

from longhorn.

My question is: why did you create a volume in longhorn-manager on /usr/local/sbin? is it useful?

launch-manager, longhorn-manager and nsmounter are put in /usr/local/sbin. Some utilities such as engine-binaries are in /var/lib/longhorn.
I'm not familiar with CIS benchmark Linux. Can you provide a support bundle for checking what the error is? Thank you.

BTW, @innobead /var/lib/longhorn is hard-coded path. Do you think we should make it configurable in the future?

from longhorn.

There is a possibilty to hide private information with a support bundle ? In state, i can't send you this file with sensitive information.

from longhorn.

There is a possibilty to hide private information with a support bundle ? In state, i can't send you this file with sensitive information.

You can manually hide the private information, or you can send the support bundle to [email protected] which is only accessible by Longhorn members.

from longhorn.

Pre Ready-For-Testing Checklist

• Where is the reproduce steps/test steps documented?
  The reproduce steps/test steps are at:

Verify regression test all passed

• Does the PR include the explanation for the fix or the feature?

• Have the backend code been merged (Manager, Engine, Instance Manager, BackupStore etc) (including backport-needed/*)?
  The PR is at

longhorn/longhorn-manager#2893

• Which areas/issues this PR might have potential impacts on?
  Area: longhorn-manager
  Issues

from longhorn.

Verified pass on longhorn master(longhorn-manager 77ac26, longhorn-engine 004f20, longhorn-instance-manager 4dd756)

From daily regression, did not observe new outstanding issue.

from longhorn.