You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This image fails to start with with --privileged (at least in my docker environments).
The issue seems to be the output of capsh --print in this case. This line in the entrypoint script isn't able to handle the capsh output in the privileged case.
[~] * docker run --rm --privileged -it alpine:latest sh
/ # apk add --no-cache --update libcap
...
OK: 8 MiB in 19 packages
/ # capsh --print
Current: =ep
...
As far as I understand =ep more or less indicates "everything is allowed" see here.
Thereby, I think the simplest fix is to add another check to the function like so
if capsh --print | grep -Eq "^Current: =ep"; then
return 0
fi
but I might be overlooking something, that's why I've opened this issue.
The text was updated successfully, but these errors were encountered:
This image fails to start with with
--privileged
(at least in my docker environments).The issue seems to be the output of
capsh --print
in this case. This line in the entrypoint script isn't able to handle the capsh output in the privileged case.Compare
to
As far as I understand
=ep
more or less indicates "everything is allowed" see here.Thereby, I think the simplest fix is to add another check to the function like so
but I might be overlooking something, that's why I've opened this issue.
The text was updated successfully, but these errors were encountered: