api: put default socket in nri-specific directory.

Change default socket path to /var/run/nri/nri.sock. This
should work better for plugins which are run as Kubernetes
daemonsets. With the socket directory bind-mounted instead
of the socket itself, plugins should be able to reconnect
if the runtime is ever restarted.

Additionally, create any missing NRI/socket directory with
0700 rights (rwx for owner only) instead of 0755.

Signed-off-by: Krisztian Litkey <[email protected]>

pkg/adaptation/adaptation.go

@@ -373,7 +373,7 @@ func (r *Adaptation) startListener() error {
 	}
 
 	os.Remove(r.socketPath)
-	if err := os.MkdirAll(filepath.Dir(r.socketPath), 0755); err != nil {
+	if err := os.MkdirAll(filepath.Dir(r.socketPath), 0700); err != nil {
 		return fmt.Errorf("failed to create socket %q: %w", r.socketPath, err)
 	}
 

pkg/api/plugin.go

@@ -23,7 +23,7 @@ import (
 
 const (
 	// DefaultSocketPath is the default socket path for external plugins.
-	DefaultSocketPath = "/var/run/nri.sock"
+	DefaultSocketPath = "/var/run/nri/nri.sock"
 	// PluginSocketEnvVar is used to inform plugins about pre-connected sockets.
 	PluginSocketEnvVar = "NRI_PLUGIN_SOCKET"
 	// PluginNameEnvVar is used to inform NRI-launched plugins about their name.