Add option for exec in /run dir (#165)

hashicorp · Aug 1, 2024 · cf4c4f1 · cf4c4f1
1 parent e9f4814
commit cf4c4f1
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/modules/runtime_container_engine_config/main.tf b/modules/runtime_container_engine_config/main.tf
@@ -59,7 +59,7 @@ locals {
         read_only = true
         tmpfs = [
           "/tmp:mode=01777",
-          "/run",
+          "/run:${var.enable_run_exec_tmpfs ? "exec" : "noexec"}",
           "/var/log/terraform-enterprise",
         ]
         ports = flatten([

diff --git a/modules/runtime_container_engine_config/variables.tf b/modules/runtime_container_engine_config/variables.tf
@@ -348,3 +348,9 @@ variable "vault_token_renew" {
   type        = number
   description = "Vault token renewal period in seconds. Required when TFE_VAULT_USE_EXTERNAL is true."
 }
+
+variable "enable_run_exec_tmpfs" {
+  default     = false
+  type        = bool
+  description = "Enable the use of executables in the tmpfs for the /run directory. Defaults to false."
+}