Azure / Azure/azure-linux-extensions
Access Denied shim.sh because of mount /var with noexec
- Dominant language
- Python
- Stars
- 333
- Forks
- 278
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 4
Description
For security reasons our CentOS 7.9 machines have mounted /var with noexec. So the deployment of the AzureMonitorAgent failes, because the shim.sh and dependencies are extracted in /var/lib/waagent/.
It should be a nice deployment when the runtime is deployed in /opt/microsoft/ Is it possible to change this?
SCOM agents and the LogAnalytics (deprecated) are also deployed in this directory.
Best regards,
Sebastian.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing how the AzureMonitorAgent extracts shim.sh and its dependencies under /var/lib/waagent/ on CentOS 7.9, then compare that deployment path with the requested /opt/microsoft/ location and the SCOM and LogAnalytics agents. Done means deployment succeeds when /var is mounted noexec, with the runtime and dependencies placed in the agreed location.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, centos, python
- Domain
- cloud, devops, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100