diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-10-15 21:46:00 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-10-15 21:46:00 +0200 |
| commit | 29c57102b78ff40bec1ece214a78d5a1b6953895 (patch) | |
| tree | 058f7c2743efe777796647dc03a8de45fcf17b5b /src/conf_mode | |
| parent | d4c5e78fc94a375487a968083f88d96323b67301 (diff) | |
| parent | a633bdd2ed65971b2f137d5f985f8f3d85b9acfc (diff) | |
| download | vyos-1x-29c57102b78ff40bec1ece214a78d5a1b6953895.tar.gz vyos-1x-29c57102b78ff40bec1ece214a78d5a1b6953895.zip | |
Merge pull request #1027 from sever-sever/T3676
containers: T3676: Allow to set capabilities
Diffstat (limited to 'src/conf_mode')
| -rwxr-xr-x | src/conf_mode/containers.py | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/src/conf_mode/containers.py b/src/conf_mode/containers.py index 1e0197a13..cc34f9d39 100755 --- a/src/conf_mode/containers.py +++ b/src/conf_mode/containers.py @@ -271,6 +271,14 @@ def apply(container): tmp = run(f'podman image exists {image}') if tmp != 0: print(os.system(f'podman pull {image}')) + # Add capability options. Should be in uppercase + cap_add = '' + if 'cap_add' in container_config: + for c in container_config['cap_add']: + c = c.upper() + c = c.replace('-', '_') + cap_add += f' --cap-add={c}' + # Check/set environment options "-e foo=bar" env_opt = '' if 'environment' in container_config: @@ -299,7 +307,7 @@ def apply(container): dvol = vol_config['destination'] volume += f' -v {svol}:{dvol}' - container_base_cmd = f'podman run --detach --interactive --tty --replace ' \ + container_base_cmd = f'podman run --detach --interactive --tty --replace {cap_add} ' \ f'--memory {memory}m --memory-swap 0 --restart {restart} ' \ f'--name {name} {port} {volume} {env_opt}' if 'allow_host_networks' in container_config: |