From b6232802e8b257d5b6df9759b56304c449199e5d Mon Sep 17 00:00:00 2001 From: "Dustin C. Hatch" Date: Sun, 29 Dec 2024 20:25:49 -0600 Subject: [PATCH] ci: Add CAP_CHROOT to build container This is needed in order to run `passwd -R` to clear the root password in the target filesystem. --- ci/podTemplate.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/ci/podTemplate.yaml b/ci/podTemplate.yaml index 97319d3..a0f1c5c 100644 --- a/ci/podTemplate.yaml +++ b/ci/podTemplate.yaml @@ -13,6 +13,7 @@ spec: capabilities: add: - CAP_SETFCAP + - CAP_SYS_CHROOT volumeMounts: - mountPath: /build name: workspace-volume