will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'Fix BuildKit rootless startup (allowPrivilegeEscalation)' (#8) from fix/buildkit-rootless into main

Browse Source
This commit is contained in:
Will Anderson
2026-04-26 06:18:08 +00:00
parent d8e2a9601b e138c45d51
commit c6d42948ff
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/gitea-runner/buildkitd.yaml
+2 -1
View File
@@ -35,9 +35,10 @@ spec:
containerPort: 1234 containerPort: 1234
securityContext: securityContext:
seccompProfile: seccompProfile:
type: Unconfined # BuildKit rootless requires this type: Unconfined # BuildKit rootless requires this
runAsUser: 1000 runAsUser: 1000
runAsGroup: 1000 runAsGroup: 1000
allowPrivilegeEscalation: true # required for newuidmap/newgidmap setuid binaries
readinessProbe: readinessProbe:
exec: exec:
command: ["buildctl", "debug", "workers"] command: ["buildctl", "debug", "workers"]