Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add support for --cap-drop #390

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ddl-ebrown
Copy link

@ddl-ebrown ddl-ebrown commented Oct 24, 2023

FYI - make test fails against the head of the main branch on my M1 -- which I didn't have time to diagnose. I'm using CI to verify that the tests behave properly.

@google-cla
Copy link

google-cla bot commented Oct 24, 2023

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@ddl-ebrown ddl-ebrown marked this pull request as ready for review October 24, 2023 18:22
@ddl-ebrown ddl-ebrown changed the title Add support for --cap-drop feat: Add support for --cap-drop Oct 26, 2023
@loosebazooka
Copy link
Member

uh, sorry no one looked at this, I get to spend a little time now and then trying to maintain this, if you can rebase this and update it, I can merge it in.

 - Support for --cap-add was added as part of
   GoogleContainerTools#327

 - This rounds out the feature set to also include support for
   --cap-drop

 - Updates tests to drop "chown" capability and verify doing so works

 - closes GoogleContainerTools#389
@ddl-ebrown
Copy link
Author

@loosebazooka updated

@ddl-ebrown
Copy link
Author

Looks like we've got failing tests

FAIL: Run options (capabilities, bindMounts) test case failed

Will take a closer look

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add support to containerRunOptions for --cap-drop
2 participants