mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-09-04 08:26:42 +00:00
swarmd: allow all capabilities
The existing set was randomly rather than carefully chosen, lets just be honest and use "all" until the proper set can be determined. Signed-off-by: Ian Campbell <ian.campbell@docker.com>
This commit is contained in:
@@ -32,20 +32,7 @@ services:
|
||||
image: "linuxkit/swarmd:a2f57f14f07fb6d7cded7832b2dabe878b28554e"
|
||||
command: ["/usr/bin/swarmd", "--containerd-addr=/run/containerd/containerd.sock", "--log-level=debug", "--state-dir=/var/lib/swarmd"]
|
||||
capabilities:
|
||||
- CAP_CHOWN
|
||||
- CAP_DAC_OVERRIDE
|
||||
- CAP_FSETID
|
||||
- CAP_FOWNER
|
||||
- CAP_MKNOD
|
||||
- CAP_NET_RAW
|
||||
- CAP_SETGID
|
||||
- CAP_SETUID
|
||||
- CAP_SETFCAP
|
||||
- CAP_SETPCAP
|
||||
- CAP_NET_BIND_SERVICE
|
||||
- CAP_SYS_CHROOT
|
||||
- CAP_KILL
|
||||
- CAP_AUDIT_WRITE
|
||||
- all
|
||||
pid: host
|
||||
net: host
|
||||
binds:
|
||||
|
Reference in New Issue
Block a user