gandalf/secubox-openwrt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(haproxy): Add proc/sys mount to LXC config for lxc-attach

Browse Source 
The HAProxy LXC container was missing lxc.mount.auto = proc:mixed sys:ro
which caused lxc-attach to fail with "mount -t proc proc /proc" error.

This prevented the LED watchdog from checking HAProxy status via
lxc-attach -n haproxy -- pgrep haproxy, triggering false SPUNK alerts.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
CyberMind-FR 2026-02-08 06:24:09 +01:00
parent ab34719f9f
commit 320277b87f
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
package/secubox/secubox-app-haproxy/files/usr/sbin/haproxyctl
View File

@ -276,7 +276,8 @@ lxc.arch = $arch
# Network: use host network for binding ports
lxc.net.0.type = none
# Mount points - avoid cgroup:mixed which causes failures on some systems
# Mount points - proc/sys needed for lxc-attach, avoid cgroup:mixed which causes failures
lxc.mount.auto = proc:mixed sys:ro
lxc.mount.entry = $data_path opt/haproxy none bind,create=dir 0 0
# Disable seccomp for compatibility