libohad-dev/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use a read-only root filesystem in service containers

Browse source
This commit is contained in:
Ohad Livne 2025-12-24 20:13:30 +02:00
parent 0df3008fa0
commit 9ee480b959
Signed by: libohad-dev
GPG key ID: 34FDC68B51191A4D
2 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
.config/containers/systemd/ollama.container
View file

@ -7,6 +7,7 @@ ContainerName=ollama
Image=docker.io/ollama/ollama:latest Image=docker.io/ollama/ollama:latest
Network=ollama.network Network=ollama.network
PublishPort=11434:11434 PublishPort=11434:11434
ReadOnly=true
Volume=%h/.local/share/ollama:/root/.ollama:ro,z Volume=%h/.local/share/ollama:/root/.ollama:ro,z
# keep-sorted end # keep-sorted end

1
.config/containers/systemd/transmission.container
View file

@ -11,6 +11,7 @@ Network=private
PublishPort=51413:51413 PublishPort=51413:51413
PublishPort=51413:51413/udp PublishPort=51413:51413/udp
PublishPort=9091:9091 PublishPort=9091:9091
ReadOnly=true
UserNS=keep-id UserNS=keep-id
Volume=%h/.config/transmission:/config:Z Volume=%h/.config/transmission:/config:Z
Volume=%h/Downloads/transmission/watch:/watch:ro,Z Volume=%h/Downloads/transmission/watch:/watch:ro,Z