kpcyrd / rebuilderd

Independent verification of binary packages - reproducible builds
GNU General Public License v3.0
355 stars 24 forks source link

Why woker containers need SYS_ADMIN to deploy #134

Open kitaharazy opened 2 years ago

kitaharazy commented 2 years ago

Hi, I noticed that in https://github.com/kpcyrd/rebuilderd/tree/b015d16ea1e37924963c60c7a34ebf0d7d45504f/worker , worker containers need to be run with SYS_ADMIN. However, due to some security concerns, it would be hard for me to deploy with SYS_ADMIN. So I sincerely wonder why SYS_ADMIN is imperative : )