use safer mount options for the container's files

5 months ago · 4f835e0560
parent 8c93327e25
commit 4f835e0560
1 changed files with 3 additions and 2 deletions
--- a/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml
+++ b/roles/custom/matrix-bridge-hookshot/tasks/reset_encryption.yml
@ -7,6 +7,7 @@
      --name={{ matrix_hookshot_container_ident }}-reset-crypto
      --user={{ matrix_user_uid }}:{{ matrix_user_gid }}
      --cap-drop=ALL
-      -v {{ matrix_hookshot_base_path }}/config.yml:/config.yml
-      {{ matrix_hookshot_docker_image }} yarn start:resetcrypto
+      --mount type=bind,src={{ matrix_hookshot_base_path }}/config.yml,dst=/config.yml
+      {{ matrix_hookshot_docker_image }}
+     yarn start:resetcrypto
  changed_when: false