Handle cap_drop from container definitions

Signed-off-by: Fs00 <francescosaltori@gmail.com>
This commit is contained in:
Fs00
2026-04-25 18:47:23 +02:00
parent 6dc1cd6ebd
commit 43d8393a3b
3 changed files with 11 additions and 3 deletions
+3 -3
View File
@@ -378,9 +378,9 @@ readonly class DockerActionManager {
$requestBody['HostConfig']['CapAdd'] = $capAdds;
}
// Disable arp spoofing
if (!in_array('NET_RAW', $capAdds, true)) {
$requestBody['HostConfig']['CapDrop'] = ['NET_RAW'];
$capDrops = $container->capDrop;
if (count($capDrops) > 0) {
$requestBody['HostConfig']['CapDrop'] = $capDrops;
}
// Disable SELinux for AIO containers so that it does not break them