ci(deploy): 修复OCI read-only只读启动失败=compose之前/app整个挂载加了:ro，但Docker尝试创建容器子目录/app/server/data时在只读overlay层mkdir报错；改成z flag（SELinux兼容）去掉ro，让docker可在/app内创建容器内子目录结构，/opt/volunteer/data持久化db仍在外层bind mount不会丢

2026-10-05 01:07:15 +08:00
parent 608d99bea2
commit d62f2e2ba4
1 changed files with 2 additions and 2 deletions
@@ -132,8 +132,8 @@ jobs:
                - PORT=3000
                - JWT_SECRET=${JWT_SECRET:-volunteer-manage-secret-key-2026}
              volumes:
-                - /opt/volunteer/data:/app/server/data
-                - /opt/volunteer/app:/app:ro
+                - /opt/volunteer/data:/app/server/data:z
+                - /opt/volunteer/app:/app:z
          EOF
          echo
          echo "compose file:"