diff --git a/ironic-image/configure-nonroot.sh b/ironic-image/configure-nonroot.sh index 8f680ab..bed8666 100755 --- a/ironic-image/configure-nonroot.sh +++ b/ironic-image/configure-nonroot.sh @@ -45,10 +45,10 @@ chown -R "${IRONIC_USER}":"${IRONIC_GROUP}" /run # ironic and httpd related changes mkdir -p /etc/httpd/conf.d -chown -R "${IRONIC_USER}":"${IRONIC_GROUP}" /etc/ironic /etc/httpd/conf /etc/httpd/conf.d -chmod 2775 /etc/ironic /etc/httpd/conf /etc/httpd/conf.d +chown -R "${IRONIC_USER}":"${IRONIC_GROUP}" /etc/ironic /etc/httpd/conf /etc/httpd/conf.d /etc/httpd/conf.modules.d/ +chmod 2775 /etc/ironic /etc/httpd/conf /etc/httpd/conf.d /etc/httpd/conf.modules.d/ #chmod 664 /etc/ironic/* /etc/httpd/conf/* /etc/httpd/conf.d/* -chmod 664 /etc/ironic/* /etc/httpd/conf/* +chmod 664 /etc/ironic/* /etc/httpd/conf/* /etc/httpd/conf.modules.d/* chown -R "${IRONIC_USER}":"${IRONIC_GROUP}" /var/lib/ironic chmod 2775 /var/lib/ironic diff --git a/ironic-image/ironic-config/apache2-vmedia.conf.j2 b/ironic-image/ironic-config/apache2-vmedia.conf.j2 index ad801a6..2301717 100644 --- a/ironic-image/ironic-config/apache2-vmedia.conf.j2 +++ b/ironic-image/ironic-config/apache2-vmedia.conf.j2 @@ -12,9 +12,13 @@ Listen [::]:{{ env.VMEDIA_TLS_PORT }} SSLCertificateKeyFile {{ env.IRONIC_VMEDIA_KEY_FILE }} + Options Indexes FollowSymLinks + AllowOverride None Require all granted + Options Indexes FollowSymLinks + AllowOverride None Require all granted diff --git a/ironic-image/ironic-config/httpd-modules.conf b/ironic-image/ironic-config/httpd-modules.conf index fd2bc99..adde4d8 100644 --- a/ironic-image/ironic-config/httpd-modules.conf +++ b/ironic-image/ironic-config/httpd-modules.conf @@ -17,4 +17,4 @@ LoadModule authn_core_module /usr/lib64/apache2/mod_authn_core.so LoadModule auth_basic_module /usr/lib64/apache2/mod_auth_basic.so LoadModule authn_file_module /usr/lib64/apache2/mod_authn_file.so LoadModule authz_user_module /usr/lib64/apache2/mod_authz_user.so -LoadModule access_compat_module /usr/lib64/apache2/mod_access_compat.so +#LoadModule access_compat_module /usr/lib64/apache2/mod_access_compat.so