rpms/skopeo
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Modify the range of groups used in net.ipv4.ping_group_range to be 1 so that

Browse Source 
it will work more easily with User Namespaces
Also turn back on AUDIT_WRITE until seccomp.json file is fixed
This commit is contained in:
Daniel J Walsh 2020-09-25 08:48:42 -04:00
parent b9658ff8e6
commit f45ca0da9c
No known key found for this signature in database
GPG Key ID: A2DF901DABE2C028
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
containers.conf
View File

@ -60,6 +60,7 @@
# the default capabilities defined in the container engine will be added. # the default capabilities defined in the container engine will be added.
# #
default_capabilities = [ default_capabilities = [
"AUDIT_WRITE",
"CHOWN", "CHOWN",
"DAC_OVERRIDE", "DAC_OVERRIDE",
"FOWNER", "FOWNER",
@ -77,7 +78,7 @@ default_capabilities = [
# for example:"net.ipv4.ping_group_range = 0 1000". # for example:"net.ipv4.ping_group_range = 0 1000".
# #
default_sysctls = [ default_sysctls = [
"net.ipv4.ping_group_range=0 65536", "net.ipv4.ping_group_range=0 1",
] ]
# A list of ulimits to be set in containers by default, specified as # A list of ulimits to be set in containers by default, specified as

7
skopeo.spec
View File

@ -46,7 +46,7 @@ Epoch: 1
Epoch: 2 Epoch: 2
%endif %endif
Version: 1.1.1 Version: 1.1.1
Release: 50.dev.git%{shortcommit0}%{?dist} Release: 51.dev.git%{shortcommit0}%{?dist}
Summary: Inspect container images and repositories on registries Summary: Inspect container images and repositories on registries
License: ASL 2.0 License: ASL 2.0
URL: %{git0} URL: %{git0}
@ -447,6 +447,11 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
%{_datadir}/%{name}/test %{_datadir}/%{name}/test
%changelog %changelog
* Fri Sep 25 2020 Dan Walsh <dwalsh@fedoraproject.org> - 1:1.1.1-51.dev.git5d5756c
- Modify the range of groups used in net.ipv4.ping_group_range to be 1 so that
- it will work more easily with User Namespaces
- Also turn back on AUDIT_WRITE until seccomp.json file is fixed
* Mon Sep 21 18:12:41 UTC 2020 RH Container Bot <rhcontainerbot@fedoraproject.org> - 1:1.1.1-50.dev.git8151b89 * Mon Sep 21 18:12:41 UTC 2020 RH Container Bot <rhcontainerbot@fedoraproject.org> - 1:1.1.1-50.dev.git8151b89
- autobuilt 8151b89 - autobuilt 8151b89