fix(systemd): allow netlink for the DHCP agent (kea-dhcp4 -t detects interfaces)
install / Installation (debian:12) (push) Failing after 7m35s
install / Installation (debian:13) (push) Successful in 4m8s
install / Installation (rocky:9) (push) Successful in 5m5s
install / Installation (ubuntu:24.04) (push) Successful in 4m2s
install / Installation (ubuntu:22.04) (push) Failing after 7m48s
install / Installation (debian:12) (push) Failing after 7m35s
install / Installation (debian:13) (push) Successful in 4m8s
install / Installation (rocky:9) (push) Successful in 5m5s
install / Installation (ubuntu:24.04) (push) Successful in 4m2s
install / Installation (ubuntu:22.04) (push) Failing after 7m48s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5.5
parent
21843d1a8b
commit
3872eb47c3
@@ -32,7 +32,8 @@ ProtectKernelLogs=yes
|
||||
ProtectControlGroups=yes
|
||||
ProtectClock=yes
|
||||
ProtectHostname=yes
|
||||
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
|
||||
# AF_NETLINK: "kea-dhcp4 -t" (validation) detects the interfaces via netlink.
|
||||
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
|
||||
RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
|
||||
+1
-1
@@ -70,7 +70,7 @@ case "$os" in
|
||||
esac
|
||||
if [[ -z "$image" ]]; then
|
||||
built_image="ddi-install-img-$id"
|
||||
retry docker build -q --pull --build-arg BASE="$os" -t "$built_image" -f "$here/systemd.Dockerfile" "$here"
|
||||
retry docker build --progress=plain --pull --build-arg BASE="$os" -t "$built_image" -f "$here/systemd.Dockerfile" "$here"
|
||||
image="$built_image"
|
||||
else
|
||||
retry docker pull -q "$image" || docker image inspect "$image" >/dev/null
|
||||
|
||||
Reference in New Issue
Block a user