taskcluster icon indicating copy to clipboard operation
taskcluster copied to clipboard

D2G: several tasks seem to need --privileged flag passed to podman run

Open petemoore opened this issue 11 months ago • 4 comments

There appear to be an increasing number of tasks that ran under docker-worker without privileged capability that are not running successfully under podman without --privileged flag. Since for podman, "privileged" doesn't increase privileges of task, it just increases the privileges inside the container that the task user already has outside the container, let's just pass --privileged regardless. This should more closely match the privileges that the docker worker tasks have.

Examples:

  • Bugmon monitor tasks (fuzzing)
    • Issue #6888
    • Task: https://community-tc.services.mozilla.com/tasks/evzR-_XzS0mKjTDanC8G0g
  • Loopback video task
    • No issue
    • https://firefox-ci-tc.services.mozilla.com/tasks/U5dS50DdRlqh7sOztqqjSQ/runs/0

petemoore avatar Mar 08 '24 07:03 petemoore