-

netflow/iptables.sh

@@ -6,7 +6,7 @@ if [[ -d "/host/proc/1/" ]]; then source /apps/gitrce/hook/singleton.sh "$0"; fi
 __get_mount_paths_cgroup_id() {
 	docker ps -q --no-trunc | while read -r cid; do
 		_path=$(docker inspect "$cid" --format '{{range .Mounts}}{{.Source}}{{"\n"}}{{end}}' 2>/dev/null)
-		if grep -q "$CACHE/$FILE_PATH_START" <<<"$_path"; then
+		if grep -qE "$CACHE/$FILE_PATH_START|writable" <<<"$_path"; then
 			_cmd="find /sys/fs/cgroup/ -maxdepth 2 -type d -name $cid | grep net_cls 2>/dev/null"
 			_cgroup_path=$(nsenter --mount=/host/proc/1/ns/mnt --net=/host/proc/1/ns/net sh -c "$_cmd")
 			_cmd_classid="cat $_cgroup_path/net_cls.classid 2>/dev/null"
@@ -15,7 +15,7 @@ __get_mount_paths_cgroup_id() {
 		fi
 	done
 }
-__get_mount_paths_cgroup_id
+# __get_mount_paths_cgroup_id
 
 __get_in_cgroup_ids() {
 	awk '$0 != 0 && $0 != 1' /sys/fs/cgroup/net_cls,net_prio/*/net_cls.classid