From 5b70ffd78f52cc463551a198e1bc44e02e69078e Mon Sep 17 00:00:00 2001 From: jochens Date: Wed, 30 Sep 2026 17:19:33 +0200 Subject: [PATCH] mosquitto, influxdb: the provisioner sees its grants where the mesh writes them MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The received grants file names each pair secret by its HOST path. A sidecar that mounts the placed grants directory at another path inside its container sees mesh.json and not the secrets beside it — mosquitto's provisioner reported ENOENT for a file that was there, and nodered's mqtt step failed against a login that was never created. Mounted at its own path now, as postgres does. --- modules/mosquitto/module.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/mosquitto/module.json b/modules/mosquitto/module.json index 8c5511d..34570c2 100644 --- a/modules/mosquitto/module.json +++ b/modules/mosquitto/module.json @@ -131,12 +131,12 @@ "network": "mosquitto", "volumes": [ "/var/lib/mesh/mosquitto/broker:/run/secrets/broker:ro", - "${dir:grants}:/var/lib/mosquitto-module/grants:ro", + "${dir:grants}:${dir:grants}:ro", "/var/lib/mesh/mosquitto/admin:/run/secrets/admin:ro" ], "env": { "MESH_BROKER_FILE": "/run/secrets/broker", - "MESH_RECEIVES": "/var/lib/mosquitto-module/grants/mesh.json", + "MESH_RECEIVES": "${dir:grants}/mesh.json", "MESH_PROVISION_MQTT": "mosquitto:1883", "MESH_PROVISION_ADMIN_USER": "mesh-admin", "MESH_PROVISION_PASSWORD_FILE": "/run/secrets/admin" -- 2.54.0