INGInious icon indicating copy to clipboard operation
INGInious copied to clipboard

Runtime environments allowing to run as root could provide more capabilities to the containers

Open mpiraux opened this issue 1 year ago • 2 comments

Is your feature request related to a problem? Please describe. Kata runtime could give more priviledge to the root user in the Docker container. Running IPMininet in a Docker container requires the ability of manipulating network namespaces.

Describe the solution you'd like When the runtime allows to run as root, pass --cap_add=ALL to the container. Do this here, https://github.com/UCL-INGI/INGInious/blob/145fc847f751ecbf1c8b52858c3a2a3e47b52670/inginious/agent/docker_agent/_docker_interface.py#L137

Describe alternatives you've considered Changing the use of Kata+Docker for virtme or smth else

mpiraux avatar Apr 18 '23 11:04 mpiraux