uptime-kuma-helm icon indicating copy to clipboard operation
uptime-kuma-helm copied to clipboard

Ping - Operation not permitted (Running in OpenShift)

Open rblundon opened this issue 1 year ago • 3 comments

Ping monitor does not work. I think this is because the SELinux permissions in the image are blocking it.

OpenShift version: 4.16.4

From pod: $ ping sh: 1: ping: Operation not permitted

I verified this is the issue: https://access.redhat.com/solutions/6972806

Resolution Ping when installed from iputils or iputils-ping ships with a file capability value automatically that is set on the binary at install location: /usr/ping or /usr/bin/ping. You must override/remove this value on install in the container in order to bypass this limitation, that kubernetes/Openshift does not ship with by default.

Embed into your Dockerfile for deployments the following line to remove the filecapability values from the binary before deployment: RUN setcap -r /usr/ping

rblundon avatar Jul 31 '24 03:07 rblundon

Thank you for the heads up, I have no environment with 4.16.z where I could have stumbled over this. I will see to pick this up for the next release 👍

k3rnelpan1c-dev avatar Sep 02 '24 22:09 k3rnelpan1c-dev

Well, now my uptime-kuma:1.23.13@sha256:bc94208ba645e1ee72388a22f07fc2642ef48a23b4220e65c16f0f4726dc2ddd image should have the fix for this included. Please let me know if this fixed it and thank you for your patience! :)

k3rnelpan1c-dev avatar Sep 05 '24 20:09 k3rnelpan1c-dev

Thank you! I can confirm that this issue has been resolved.

Cheers,

Ryan

On Sep 5, 2024, at 3:37 PM, K3rnelPan1c @.***> wrote:

Well, now my @.***:bc94208ba645e1ee72388a22f07fc2642ef48a23b4220e65c16f0f4726dc2ddd image should have the fix for this included. Please let me know if this fixed it and thank you for your patience! :)

— Reply to this email directly, view it on GitHub https://github.com/k3rnelpan1c-dev/uptime-kuma-helm/issues/180#issuecomment-2332587591, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABJSA7DV32XJRTKGXNZ6DMLZVC6IBAVCNFSM6AAAAABLXTQAW6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMZSGU4DONJZGE. You are receiving this because you authored the thread.

rblundon avatar Sep 06 '24 01:09 rblundon

resolved

k3rnelpan1c-dev avatar Jan 01 '25 21:01 k3rnelpan1c-dev