fix: change /dev/crypto/nx-gzip to privileged

Signed-off-by: Paul Bastide <[email protected]>
IBM · Oct 2, 2024 · f503a2b · f503a2b
1 parent e6604db
commit f503a2b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/scripts/nx-gzip/manifests/04-buildconfig.yaml b/scripts/nx-gzip/manifests/04-buildconfig.yaml
@@ -22,6 +22,8 @@ spec:
       FROM quay.io/fedora/nginx-126:latest
       USER root
       RUN dnf install -y libnxz
+      RUN rf -f /usr/lib64/libz.so.1* || true
       RUN ln -s /usr/lib/libnxz.so.0.0 /usr/lib/libz.so
+      RUN ln -s /usr/lib64/libnxz.so.0.0 /usr/lib/libz.so
       ENTRYPOINT ["LD_PRELOAD=/usr/lib64/libnxz.so.0", "NX_GZIP_TRACE=8", "nginx", "-g", "daemon", "off;"]
   runPolicy: Serial
diff --git a/scripts/nx-gzip/manifests/05-deployment.yaml b/scripts/nx-gzip/manifests/05-deployment.yaml
@@ -48,7 +48,7 @@ spec:
         serviceAccount: ocp4-workload-sa
         serviceAccountName: ocp4-workload-sa
         securityContext:
-          privileged: false
+          privileged: true
           capabilities:
             drop:
               - ALL