# Provisioning files of the phones, served over TFTP, and their directory, # served over HTTP. Operator-provided, on the # precious-data mount so that the host can write them. The "$" marks it for # removal on `systemd-tmpfiles --purge` (i.e. `make uninstall`). # # /var/lib/quadlets/asterisk is NOT declared here, and must not be. The package # creates it, once. A "d" line adjusts the directory again at every run of # systemd-tmpfiles, and resets its SELinux label to var_lib_t on the way. Such a # run happens AFTER the containers start on the first boot of a Fedora CoreOS # machine: rpm-ostree applies the qemu-guest-agent package live, then runs # "systemd-tmpfiles --create --prefix=/var". Asterisk then loses access to the # directory Podman had just relabeled, and every REGISTER fails with # "ast_db_put: SQL logic error". Measured on 2026-10-25. The virtiofs mount is # not affected: its label is fixed by the mount. d$ /var/lib/virtiofs/data/asterisk 0750 10036 10000 - d$ /var/lib/virtiofs/data/asterisk/tftp 0750 10036 10000 - d$ /var/lib/virtiofs/data/asterisk/http 0750 10036 10000 -