Merge pull request 'Fix BuildKit rootless startup (allowPrivilegeEscalation)' (#8) from fix/buildkit-rootless into main

2026-04-26 06:18:08 +00:00
parent d8e2a9601b e138c45d51
commit c6d42948ff
1 changed files with 2 additions and 1 deletions
@@ -35,9 +35,10 @@ spec:
              containerPort: 1234
          securityContext:
            seccompProfile:
-              type: Unconfined       # BuildKit rootless requires this
+              type: Unconfined            # BuildKit rootless requires this
            runAsUser: 1000
            runAsGroup: 1000
+            allowPrivilegeEscalation: true  # required for newuidmap/newgidmap setuid binaries
          readinessProbe:
            exec:
              command: ["buildctl", "debug", "workers"]