add noswap to secretdir tmpfs

hashicorp · Dec 10, 2024 · abde793 · abde793
1 parent 3bc2c07
commit abde793
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/client/allocdir/fs_linux.go b/client/allocdir/fs_linux.go
@@ -73,7 +73,8 @@ func createSecretDir(dir string, size int) error {
 		}
 
 		flags := uintptr(syscall.MS_NOEXEC)
-		options := fmt.Sprintf("size=%dm", size)
+		// Permanantly disable swap for tmpfs for SecretDir.
+		options := fmt.Sprintf("size=%dm,noswap", size)
 		if err := syscall.Mount("tmpfs", dir, "tmpfs", flags, options); err != nil {
 			return os.NewSyscallError("mount", err)
 		}