From 346c88a17931be2efa90d70f1f50696421c9ed94 Mon Sep 17 00:00:00 2001 From: "Dustin C. Hatch" Date: Sun, 29 Dec 2024 20:25:49 -0600 Subject: [PATCH] ci: Add CAP_CHROOT to build container This is needed in order to run `passwd -R` to clear the root password in the target filesystem. --- ci/podTemplate.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/ci/podTemplate.yaml b/ci/podTemplate.yaml index f4bc25b..51cd9d8 100644 --- a/ci/podTemplate.yaml +++ b/ci/podTemplate.yaml @@ -13,6 +13,7 @@ spec: capabilities: add: - CAP_SETFCAP + - CAP_SYS_CHROOT volumeMounts: - mountPath: /build name: workspace-volume