nprasad2077/runner
1
0 Fork 0
mirror of https://gitea.com/gitea/runner.git synced 2026-11-07 07:40:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add support for container kernel capabilities (#716)

Browse Source 
This patch adds two new command-line flags to specify one or
more kernel capabilities to add or remove from the workflow
containers.

The command-line flag `--container-cap-add` allows for adding
specific capabilities on the workflow containers; where as,

The command-line flag `--container-cap-drop` allows for removing
specific capabilities on the workflow containers.

This was developed to specifically be able to add `SYS_PTRACE`
to a workflow I maintain. It involves using this capability to
monitor a make build, to then build a compilation database.

Signed-off-by: Joseph Benden <[email protected]>
This commit is contained in:
Joseph Benden authored and GitHub committed 2021-06-04 16:06:59 +00:00
1 parent 8a9167da82
commit 6b4d359737
6 files changed
+17 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

pkg/runner/runner.go
+2
View File
@@ -40,6 +40,8 @@ type Config struct {
ContainerDaemonSocket string // Path to Docker daemon socket
UseGitIgnore bool // controls if paths in .gitignore should not be copied into container, default true
GitHubInstance string // GitHub instance to use, default "github.com"
ContainerCapAdd []string // list of kernel capabilities to add to the containers
ContainerCapDrop []string // list of kernel capabilities to remove from the containers
}
// Resolves the equivalent host path inside the container