aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorArun Isaac2022-08-29 15:00:15 +0530
committerArun Isaac2022-08-29 15:00:15 +0530
commit6d75f6c1d2b976618d8eda25f90f12768450a8a9 (patch)
tree466a860562b2073c80ba58aa90341f49bd429e41
parentfefb6bbfa109bfd901842983d9f3b0f93cbb51ef (diff)
downloadgn-machines-6d75f6c1d2b976618d8eda25f90f12768450a8a9.tar.gz
Run production in separate network namespace.
The production container need interact with the outside world only through a single Unix socket file on which the GeneNetwork web server listens. Hide all other interfaces to it. * production-deploy.sh (container_script): Remove --network flag.
-rwxr-xr-xproduction-deploy.sh2
1 files changed, 1 insertions, 1 deletions
diff --git a/production-deploy.sh b/production-deploy.sh
index 19cb17f..c2c5055 100755
--- a/production-deploy.sh
+++ b/production-deploy.sh
@@ -21,7 +21,7 @@
# Build and install genenetwork production container on tux02.
-container_script=$(guix system container --network \
+container_script=$(guix system container \
--verbosity=3 \
--share=/var/guix-containers/genenetwork/var/lib/virtuoso=/var/lib/virtuoso \
production.scm)