Set owner/group to root/root when unarchiving kata-containers (kubern…

…etes-sigs#10338) Set owner/group to root/root when unarchiving kata-containers binary to prevent kata-containers binaries/directories and especially / from getting chowned to 1001:123, the file owner specified in the kata-containers archive
pedro-peter · May 8, 2024 · cf7e54b · cf7e54b
1 parent fb715f1
commit cf7e54b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/roles/container-engine/kata-containers/tasks/main.yml b/roles/container-engine/kata-containers/tasks/main.yml
@@ -9,6 +9,8 @@
     src: "{{ downloads.kata_containers.dest }}"
     dest: "/"
     mode: 0755
+    owner: root
+    group: root
     remote_src: yes
 
 - name: Kata-containers | Create config directory