From: Guillaume Abrioux <gabrioux@redhat.com>
Date: Tue, 7 Dec 2021 14:43:45 +0000 (+0100)
Subject: dashboard: allow collecting stats from the host
X-Git-Tag: v6.0.26~6
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=79b1ad47a1ec4734e2c9e835a0a19bf57cebc435;p=ceph-ansible.git

dashboard: allow collecting stats from the host

This commit makes podman bindmount `/:/rootfs:ro` so the container can
collect data from the host.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=2028775

Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
(cherry picked from commit 0f34cd16d808dbb800efd0f558b29bcfb218bbfa)
---

diff --git a/roles/ceph-node-exporter/templates/node_exporter.service.j2 b/roles/ceph-node-exporter/templates/node_exporter.service.j2
index a253d6522..8641c57d2 100644
--- a/roles/ceph-node-exporter/templates/node_exporter.service.j2
+++ b/roles/ceph-node-exporter/templates/node_exporter.service.j2
@@ -23,11 +23,13 @@ ExecStart=/usr/bin/{{ container_binary }} run --rm --name=node-exporter \
 {% endif %}
   --pids-limit={{ 0 if container_binary == 'podman' else -1 }} \
   --privileged \
-  -v /proc:/host/proc:ro -v /sys:/host/sys:ro \
+  --security-opt label=disable \
+  -v /:/rootfs:ro \
   --net=host \
   {{ node_exporter_container_image }} \
-  --path.procfs=/host/proc \
-  --path.sysfs=/host/sys \
+  --path.procfs=/rootfs/proc \
+  --path.sysfs=/rootfs/sys \
+  --path.rootfs=/rootfs \
   --no-collector.timex \
   --web.listen-address=:{{ node_exporter_port }}
 {% if container_binary == 'podman' %}