docker: Add env var to control capabilities (#8552)
As it's not simple to run a container under Docker/Kubernetes as non-root but with additional capabilities, add an internal hack.
This commit is contained in:
+2
-2
@@ -15,12 +15,12 @@ EXPOSE 8384 22000/tcp 22000/udp 21027/udp
|
||||
|
||||
VOLUME ["/var/syncthing"]
|
||||
|
||||
RUN apk add --no-cache ca-certificates su-exec tzdata
|
||||
RUN apk add --no-cache ca-certificates su-exec tzdata libcap
|
||||
|
||||
COPY --from=builder /src/syncthing /bin/syncthing
|
||||
COPY --from=builder /src/script/docker-entrypoint.sh /bin/entrypoint.sh
|
||||
|
||||
ENV PUID=1000 PGID=1000 HOME=/var/syncthing
|
||||
ENV PUID=1000 PGID=1000 HOME=/var/syncthing PCAP=
|
||||
|
||||
HEALTHCHECK --interval=1m --timeout=10s \
|
||||
CMD nc -z 127.0.0.1 8384 || exit 1
|
||||
|
||||
Reference in New Issue
Block a user