fix(systemd): allow netlink for the DHCP agent (kea-dhcp4 -t detects interfaces)
install / Installation (debian:12) (push) Failing after 7m35s
install / Installation (debian:13) (push) Successful in 4m8s
install / Installation (rocky:9) (push) Successful in 5m5s
install / Installation (ubuntu:24.04) (push) Successful in 4m2s
install / Installation (ubuntu:22.04) (push) Failing after 7m48s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
sir_melonchen
2026-10-15 20:05:09 +02:00
co-authored by Claude Opus 5.5
parent 21843d1a8b
commit 3872eb47c3
2 changed files with 3 additions and 2 deletions
+2 -1
View File
@@ -32,7 +32,8 @@ ProtectKernelLogs=yes
ProtectControlGroups=yes
ProtectClock=yes
ProtectHostname=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
# AF_NETLINK: "kea-dhcp4 -t" (validation) detects the interfaces via netlink.
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
+1 -1
View File
@@ -70,7 +70,7 @@ case "$os" in
esac
if [[ -z "$image" ]]; then
built_image="ddi-install-img-$id"
retry docker build -q --pull --build-arg BASE="$os" -t "$built_image" -f "$here/systemd.Dockerfile" "$here"
retry docker build --progress=plain --pull --build-arg BASE="$os" -t "$built_image" -f "$here/systemd.Dockerfile" "$here"
image="$built_image"
else
retry docker pull -q "$image" || docker image inspect "$image" >/dev/null