mirror of
https://github.com/jupyterhub/the-littlest-jupyterhub.git
synced 2025-12-18 21:54:05 +08:00
move state outside envs
so it can be managed separately more easily
This commit is contained in:
@@ -13,8 +13,7 @@ from ruamel.yaml import YAML
|
|||||||
INSTALL_PREFIX = os.environ.get('TLJH_INSTALL_PREFIX', '/opt/tljh')
|
INSTALL_PREFIX = os.environ.get('TLJH_INSTALL_PREFIX', '/opt/tljh')
|
||||||
HUB_ENV_PREFIX = os.path.join(INSTALL_PREFIX, 'hub')
|
HUB_ENV_PREFIX = os.path.join(INSTALL_PREFIX, 'hub')
|
||||||
USER_ENV_PREFIX = os.path.join(INSTALL_PREFIX, 'user')
|
USER_ENV_PREFIX = os.path.join(INSTALL_PREFIX, 'user')
|
||||||
|
STATE_DIR = os.path.join(INSTALL_PREFIX, 'state')
|
||||||
STATE_DIR = os.path.join(HUB_ENV_PREFIX, 'state')
|
|
||||||
|
|
||||||
HERE = os.path.abspath(os.path.dirname(__file__))
|
HERE = os.path.abspath(os.path.dirname(__file__))
|
||||||
|
|
||||||
|
|||||||
@@ -14,7 +14,7 @@ PrivateTmp=yes
|
|||||||
PrivateDevices=yes
|
PrivateDevices=yes
|
||||||
ProtectKernelTunables=yes
|
ProtectKernelTunables=yes
|
||||||
ProtectKernelModules=yes
|
ProtectKernelModules=yes
|
||||||
EnvironmentFile={install_prefix}/hub/state/configurable-http-proxy.secret
|
EnvironmentFile={install_prefix}/state/configurable-http-proxy.secret
|
||||||
# Set PATH so env can find correct node
|
# Set PATH so env can find correct node
|
||||||
Environment=PATH=$PATH:{install_prefix}/hub/bin
|
Environment=PATH=$PATH:{install_prefix}/hub/bin
|
||||||
ExecStart={install_prefix}/hub/bin/configurable-http-proxy \
|
ExecStart={install_prefix}/hub/bin/configurable-http-proxy \
|
||||||
|
|||||||
@@ -10,14 +10,14 @@ User=root
|
|||||||
Restart=always
|
Restart=always
|
||||||
# jupyterhub process should have no access to home directories
|
# jupyterhub process should have no access to home directories
|
||||||
ProtectHome=tmpfs
|
ProtectHome=tmpfs
|
||||||
WorkingDirectory={install_prefix}/hub/state
|
WorkingDirectory={install_prefix}/state
|
||||||
# Protect bits that are normally shared across the system
|
# Protect bits that are normally shared across the system
|
||||||
PrivateTmp=yes
|
PrivateTmp=yes
|
||||||
PrivateDevices=yes
|
PrivateDevices=yes
|
||||||
ProtectKernelTunables=yes
|
ProtectKernelTunables=yes
|
||||||
ProtectKernelModules=yes
|
ProtectKernelModules=yes
|
||||||
# Source CONFIGPROXY_AUTH_TOKEN from here!
|
# Source CONFIGPROXY_AUTH_TOKEN from here!
|
||||||
EnvironmentFile={install_prefix}/hub/state/configurable-http-proxy.secret
|
EnvironmentFile={install_prefix}/state/configurable-http-proxy.secret
|
||||||
Environment=TLJH_INSTALL_PREFIX={install_prefix}
|
Environment=TLJH_INSTALL_PREFIX={install_prefix}
|
||||||
ExecStart={python_interpreter_path} -m jupyterhub.app -f {jupyterhub_config_path}
|
ExecStart={python_interpreter_path} -m jupyterhub.app -f {jupyterhub_config_path}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user