Mount /sys/fs and /tmp as a new tmpfs

peridot/builder/v1/workflow/infrastructure.go

@@ -36,6 +36,12 @@ import (
 	"database/sql"
 	"errors"
 	"fmt"
+	"math/rand"
+	"os"
+	"runtime"
+	"strings"
+	"time"
+
 	"github.com/sirupsen/logrus"
 	"github.com/spf13/viper"
 	"go.temporal.io/api/enums/v1"
@@ -49,14 +55,9 @@ import (
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/client-go/kubernetes"
 	"k8s.io/client-go/rest"
-	"math/rand"
-	"os"
 	"peridot.resf.org/peridot/db/models"
 	peridotpb "peridot.resf.org/peridot/pb"
 	"peridot.resf.org/utils"
-	"runtime"
-	"strings"
-	"time"
 )
 
 type ProvisionWorkerRequest struct {
@@ -638,6 +639,14 @@ func (c *Controller) CreateK8sPodActivity(ctx context.Context, req *ProvisionWor
 							Name:      "security-limits",
 							MountPath: "/etc/security/limits.conf",
 						},
+						{
+							Name:      "sysfs",
+							MountPath: "/sys/fs",
+						},
+						{
+							Name:      "tmpfs",
+							MountPath: "/tmp/",
+						},
 					},
 				},
 			},
@@ -658,6 +667,23 @@ func (c *Controller) CreateK8sPodActivity(ctx context.Context, req *ProvisionWor
 						},
 					},
 				},
+				{
+					Name: "sysfs",
+					VolumeSource: v1.VolumeSource{
+						HostPath: &v1.HostPathVolumeSource{
+							Path: "/sys/fs",
+						},
+					},
+				},
+				{
+					Name:         "tmpfs",
+					VolumeSource: v1.VolumeSource{
+						EmptyDir: &v1.EmptyDirVolumeSource{
+							Medium: "Memory",
+							SizeLimit: nil
+						}
+					}
+				},
 			},
 			Tolerations: []v1.Toleration{
 				{