Revert "fix(fedimint): run fmcd with seccomp=unconfined so its DHT can start (#7)"
This reverts commit 409543c41e.
This commit is contained in:
@@ -149,9 +149,6 @@ pub struct QuadletUnit {
|
||||
pub command: Vec<String>,
|
||||
pub read_only_root: bool,
|
||||
pub no_new_privileges: bool,
|
||||
/// Render `SeccompProfile=unconfined` — for daemons whose networking needs
|
||||
/// syscalls the default rootless seccomp profile blocks (e.g. fmcd, #7).
|
||||
pub seccomp_unconfined: bool,
|
||||
pub cpu_quota: Option<u32>,
|
||||
pub restart_policy: RestartPolicy,
|
||||
}
|
||||
@@ -255,9 +252,6 @@ impl QuadletUnit {
|
||||
if self.no_new_privileges {
|
||||
let _ = writeln!(s, "NoNewPrivileges=true");
|
||||
}
|
||||
if self.seccomp_unconfined {
|
||||
let _ = writeln!(s, "SeccompProfile=unconfined");
|
||||
}
|
||||
if let Some(cpus) = self.cpu_quota {
|
||||
let _ = writeln!(s, "PodmanArgs=--cpus={cpus}");
|
||||
}
|
||||
@@ -414,7 +408,6 @@ impl QuadletUnit {
|
||||
command: app.container.custom_args.clone(),
|
||||
read_only_root: app.security.readonly_root,
|
||||
no_new_privileges: app.security.no_new_privileges,
|
||||
seccomp_unconfined: app.security.seccomp_unconfined,
|
||||
cpu_quota: app.resources.cpu_limit,
|
||||
restart_policy: RestartPolicy::OnFailure,
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user