From cdf9fe4c9cfd4572c49207936c2304162e91e7b1 Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Tue, 23 Sep 2025 15:23:55 +0200
Subject: kea: T7854: Use helper for Kea VRF systemd units

---
 src/system/kea-vrf-helper | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100755 src/system/kea-vrf-helper

(limited to 'src/system')

diff --git a/src/system/kea-vrf-helper b/src/system/kea-vrf-helper
new file mode 100755
index 000000000..b4dd6a349
--- /dev/null
+++ b/src/system/kea-vrf-helper
@@ -0,0 +1,14 @@
+#!/bin/bash
+
+VRF=$1
+shift
+
+export KEA_DHCP_DATA_DIR=/config/dhcp
+export KEA_HOOK_SCRIPTS_PATH=/usr/libexec/vyos/system
+export KEA_LOCKFILE_DIR=/run/lock/kea
+
+ip vrf exec $VRF \
+    setpriv --reuid=_kea --regid=_kea --init-groups \
+        --inh-caps +net_bind_service,+net_raw \
+        --ambient-caps +net_bind_service,+net_raw \
+        $@
-- 
cgit v1.2.3