Skip to content

Commit

Permalink
Add CAP_BPF capability for non-root usage
Browse files Browse the repository at this point in the history 
For some reason, the capabilitites needed to run as root, has changed a bit, so CAP_BPF is now also needed.
  • Loading branch information
@TheQue42
TheQue42 authored Oct 24, 2024
1 parent b07e42d commit 1121ce4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docker/heplify/Dockerfile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,5 +13,5 @@ FROM alpine:3.19
RUN apk --no-cache add ca-certificates tzdata libcap
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY --from=builder /heplify/heplify .
RUN /usr/sbin/setcap cap_net_raw,cap_net_admin=eip heplify
RUN /usr/sbin/setcap cap_bpf,cap_net_raw,cap_net_admin=eip heplify
CMD ["./heplify", "-h"]

1 comment on commit 1121ce4

@Dletta
Copy link
Contributor

@Dletta Dletta commented on 1121ce4 Nov 6, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@TheQue42 Adding cap_bpf breaks my docker container with the below error:

exec ./heplify: operation not permitted

Please sign in to comment.