cruizba 815d42d211 openvidu-deployment: HA AWS - run the Docker Hub cache of the Master Nodes unprivileged ... - The pull-through cache for private Media Nodes ran as root with no sandboxing. It now runs as a transient systemd user (DynamicUser) with no capabilities: it can only write its own cache (StateDirectory, /var/lib/registry-mirror), and systemd restricts its kernel, device, namespace, address family and syscall access. TCP 5555 needs no privileges. - registry_mirror.sh no longer creates the cache directory: systemd creates it with the right owner. Assisted-by: claude-code - Anthropic - Claude Opus 5.5		2026-09-28 20:24:55 +02:00
..
cf-openvidu-ha.yaml	openvidu-deployment: HA AWS - run the Docker Hub cache of the Master Nodes unprivileged	2026-09-28 20:24:55 +02:00