openvidu/openvidu-deployment/pro/ha
cruizba 815d42d211 openvidu-deployment: HA AWS - run the Docker Hub cache of the Master Nodes unprivileged
- The pull-through cache for private Media Nodes ran as root with no sandboxing. It now
  runs as a transient systemd user (DynamicUser) with no capabilities: it can only write
  its own cache (StateDirectory, /var/lib/registry-mirror), and systemd restricts its
  kernel, device, namespace, address family and syscall access. TCP 5555 needs no
  privileges.
- registry_mirror.sh no longer creates the cache directory: systemd creates it with the
  right owner.


Assisted-by: claude-code - Anthropic - Claude Opus 5.5
2026-09-28 20:24:55 +02:00
..
aws openvidu-deployment: HA AWS - run the Docker Hub cache of the Master Nodes unprivileged 2026-09-28 20:24:55 +02:00
azure openvidu-deployment: add "2>/dev/null" to silence outputs and quotes for correct var expansion 2026-09-10 13:13:42 +02:00
gcp openvidu-deployment: add "2>/dev/null" to silence outputs and quotes for correct var expansion 2026-09-10 13:13:42 +02:00
install_ov_master_node.sh chore: update third-party versions (#911) 2026-09-25 13:18:02 +02:00
install_ov_media_node.sh chore: update third-party versions (#911) 2026-09-25 13:18:02 +02:00