mirror of
https://github.com/coder/coder.git
synced 2025-07-15 22:20:27 +00:00
ci: Fix dogfood installation by forcing default configurations (#557)
* ci: Fix dogfood installation by forcing default configurations The dpkg prompt to override config files was appearing, but this will auto-approve it. * Add CAP_NET_BIND_SERVICE to allow listening on :443
This commit is contained in:
@ -17,7 +17,7 @@ ProtectHome=read-only
|
||||
PrivateTmp=yes
|
||||
PrivateDevices=yes
|
||||
SecureBits=keep-caps
|
||||
AmbientCapabilities=CAP_IPC_LOCK
|
||||
AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
|
||||
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
|
||||
NoNewPrivileges=yes
|
||||
ExecStart=/usr/bin/coder start
|
||||
|
Reference in New Issue
Block a user