Been trying to cook up a systemd-sysext for crowdsec + crowdsec firewall bouncer to extend the base flatcar container linux image. Surprisingly straightforward with the sysext bakery.

However, crowdsec needs a mutable folder where it can write stuff (e.g logs etc.). This defaults to /var/crowdsec/data. I can create the /var/crowdsec/data folder but when crowdsec attempts to create and write to the logs folder below this I see a permission error.

Am I missing something obvious? Anyone know how I can fix this?

#linux #sytemd #coreos #flatcarlinux