ci: Fix dogfood installation by forcing default configurations (#557)

* ci: Fix dogfood installation by forcing default configurations

The dpkg prompt to override config files was
appearing, but this will auto-approve it.

* Add CAP_NET_BIND_SERVICE to allow listening on :443
This commit is contained in:
Kyle Carberry
2022-03-24 14:02:09 -06:00
committed by GitHub
parent bf00487174
commit d371a66447
2 changed files with 2 additions and 2 deletions

View File

@ -17,7 +17,7 @@ ProtectHome=read-only
PrivateTmp=yes
PrivateDevices=yes
SecureBits=keep-caps
AmbientCapabilities=CAP_IPC_LOCK
AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
NoNewPrivileges=yes
ExecStart=/usr/bin/coder start