KNEL/PFVCluster
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(agents): dhcpd AppArmor /etc/dhcp path constraint field lesson [#728]

Browse Source
This commit is contained in:
mrcharles
2026-09-02 20:23:38 -05:00
parent 1dbf16c9df
commit 4de1457eaa
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AGENTS.md
+4
View File
@@ -301,6 +301,10 @@ Hard-won operational gotchas. One line each; keep them short and load-bearing.
Pi-holes; use `tailscale status` peer IPs + the chokepoint env overrides Pi-holes; use `tailscale status` peer IPs + the chokepoint env overrides
(NETINFRA01_HOST/NETINFRA02_HOST, VM_IP) to reach hosts by Tailscale (NETINFRA01_HOST/NETINFRA02_HOST, VM_IP) to reach hosts by Tailscale
while names are unresolvable. Fix one node, verify, then the other. while names are unresolvable. Fix one node, verify, then the other.
- **dhcpd + AppArmor:** on the netinfra pair, dhcpd can only read configs
under `/etc/dhcp/**` — staging a candidate config in /tmp fails dhcpd -t
with "Permission denied" even as root. Stage as /etc/dhcp/*.candidate,
test, then move into place.
## Questions (NON-NEGOTIABLE) ## Questions (NON-NEGOTIABLE)