From f503a2ba5e5c7218e089134b6edf67b1dd9d125e Mon Sep 17 00:00:00 2001 From: Paul Bastide Date: Wed, 2 Oct 2024 16:20:07 -0400 Subject: [PATCH] fix: change /dev/crypto/nx-gzip to privileged Signed-off-by: Paul Bastide --- scripts/nx-gzip/manifests/04-buildconfig.yaml | 2 ++ scripts/nx-gzip/manifests/05-deployment.yaml | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/scripts/nx-gzip/manifests/04-buildconfig.yaml b/scripts/nx-gzip/manifests/04-buildconfig.yaml index 547c93a..add6595 100644 --- a/scripts/nx-gzip/manifests/04-buildconfig.yaml +++ b/scripts/nx-gzip/manifests/04-buildconfig.yaml @@ -22,6 +22,8 @@ spec: FROM quay.io/fedora/nginx-126:latest USER root RUN dnf install -y libnxz + RUN rf -f /usr/lib64/libz.so.1* || true RUN ln -s /usr/lib/libnxz.so.0.0 /usr/lib/libz.so + RUN ln -s /usr/lib64/libnxz.so.0.0 /usr/lib/libz.so ENTRYPOINT ["LD_PRELOAD=/usr/lib64/libnxz.so.0", "NX_GZIP_TRACE=8", "nginx", "-g", "daemon", "off;"] runPolicy: Serial \ No newline at end of file diff --git a/scripts/nx-gzip/manifests/05-deployment.yaml b/scripts/nx-gzip/manifests/05-deployment.yaml index c861636..2ec4339 100644 --- a/scripts/nx-gzip/manifests/05-deployment.yaml +++ b/scripts/nx-gzip/manifests/05-deployment.yaml @@ -48,7 +48,7 @@ spec: serviceAccount: ocp4-workload-sa serviceAccountName: ocp4-workload-sa securityContext: - privileged: false + privileged: true capabilities: drop: - ALL