From 29a935c490b9d2d8262559f45fa9784b5657703b Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sun, 29 Dec 2024 20:25:49 -0600
Subject: [PATCH] ci: Add CAP_CHROOT to build container

This is needed in order to run `passwd -R` to clear the root password
in the target filesystem.
---
 ci/podTemplate.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ci/podTemplate.yaml b/ci/podTemplate.yaml
index 97319d3..7e63b92 100644
--- a/ci/podTemplate.yaml
+++ b/ci/podTemplate.yaml
@@ -12,6 +12,7 @@ spec:
     securityContext:
       capabilities:
         add:
+        - CAP_CHROOT
         - CAP_SETFCAP
     volumeMounts:
     - mountPath: /build