Make conda-store file system read-only by default (#1595)

Co-authored-by: eskild <42120229+iameskild@users.noreply.github.com>
nebari-dev · Dec 15, 2022 · 4607d1c · 4607d1c
1 parent 49bca71
commit 4607d1c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...-kubernetes-services/modules/kubernetes/services/conda-store/config/conda_store_config.py b/...-kubernetes-services/modules/kubernetes/services/conda-store/config/conda_store_config.py
@@ -29,7 +29,7 @@ def conda_store_config(path="/var/lib/conda-store/config.json"):
 )
 c.CondaStore.default_uid = 1000
 c.CondaStore.default_gid = 100
-c.CondaStore.default_permissions = "775"
+c.CondaStore.default_permissions = "555"
 c.CondaStore.conda_included_packages = ["ipykernel"]
 
 c.S3Storage.internal_endpoint = f"{config['minio-service']}:9000"