Capabilities for kopia binary (#1937)

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
kanisterio · Mar 6, 2023 · a4a8534 · a4a8534
1 parent 2b3e398
commit a4a8534
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/docker/kanister-elasticsearch/image/Dockerfile b/docker/kanister-elasticsearch/image/Dockerfile
@@ -4,6 +4,7 @@ FROM ${TOOLS_IMAGE} AS TOOLS_IMAGE
 FROM debian:bullseye
 COPY --from=TOOLS_IMAGE /usr/local/bin/restic /usr/local/bin/restic
 COPY --from=TOOLS_IMAGE /usr/local/bin/kopia /usr/local/bin/kopia
+RUN setcap cap_chown,cap_fowner,cap_dac_override+iep /usr/local/bin/kopia
 ADD kando /usr/local/bin/
 
 RUN apt update

diff --git a/docker/tools/Dockerfile b/docker/tools/Dockerfile
@@ -59,4 +59,6 @@ RUN microdnf -y update && microdnf -y install shadow-utils gzip && \
   microdnf -y remove shadow-utils && \
   microdnf clean all
 
+RUN setcap cap_chown,cap_fowner,cap_dac_override+iep /usr/local/bin/kopia
+
 CMD [ "/usr/bin/tail", "-f", "/dev/null" ]