will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix BuildKit rootless: allow privilege escalation for newuidmap/newgidmap

Browse Source
This commit is contained in:
Will Anderson
2026-04-26 01:17:41 -05:00
parent d8e2a9601b
commit e138c45d51
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/gitea-runner/buildkitd.yaml
+2 -1
View File
@@ -35,9 +35,10 @@ spec:
containerPort: 1234 containerPort: 1234
securityContext: securityContext:
seccompProfile: seccompProfile:
type: Unconfined # BuildKit rootless requires this type: Unconfined # BuildKit rootless requires this
runAsUser: 1000 runAsUser: 1000
runAsGroup: 1000 runAsGroup: 1000
allowPrivilegeEscalation: true # required for newuidmap/newgidmap setuid binaries
readinessProbe: readinessProbe:
exec: exec:
command: ["buildctl", "debug", "workers"] command: ["buildctl", "debug", "workers"]