Update doc/source/admin/production.md

Co-authored-by: Martin Cech <cech.marten@gmail.com>
This commit is contained in:
M Bernt
2022-07-01 14:07:36 +02:00
committed by GitHub
co-authored by Martin Cech
parent 99935b64ef
commit fe10f76aba
+1 -1
View File
@@ -167,7 +167,7 @@ Note that the tool only knows the paths to inputs and outputs, but if using the
There are three approaches to protect Galaxy against this:
- Use different credentials for running tools. This can be configured using the ``real_system_username`` config variable.
- Configure Galaxy to run jobs in a container and enable ``outputs_to_working_directory``. Then the tool will in an environment that allows write access only for the job working dir. All other paths will be accessible read only.
- Configure Galaxy to run jobs in a container and enable ``outputs_to_working_directory``. Then the tool will execute in an environment that allows write access only for the job working dir. All other paths will be accessible read only.
- Use pulsar to stage inputs and outputs
More information on pulsar configuration can be found in the [job configuration](jobs.md) documentation, and the other two are explained in [using a compute cluster](cluster.md).