Skip to content

Commit 187104e

Browse files
committed
[FAB-3722] /examples/cluster: Use /var
We were allowing the CA to write persistent files to our /etc volume mount. This is both poor-form as well as problematic since it may cause root-owned files to cause problems with removing the container. Fixes FAB-3722 Change-Id: Ibda7c0e09c34517711d5870f42f9aebfffdd0549 Signed-off-by: Greg Haskins <[email protected]>
1 parent 7a42145 commit 187104e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

examples/cluster/config/fabric-ca-server-config.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -122,7 +122,7 @@ registry:
122122
#############################################################################
123123
db:
124124
type: sqlite3
125-
datasource: /var/hyperledger/fabric-ca-server.db
125+
datasource: /var/hyperledger/fabric-ca-server/state.db
126126
tls:
127127
enabled: false
128128
certfiles:
@@ -206,7 +206,7 @@ bccsp:
206206
security: 256
207207
filekeystore:
208208
# The directory used for the software file-based keystore
209-
keystore: keystore
209+
keystore: /var/hyperledger/fabric-ca-server/keystore
210210

211211
#############################################################################
212212
# The fabric-ca-server init and start commands support the following two

0 commit comments

Comments
 (0)