Drop as much capabilities as possibile for the Collabora container (#8000)

2026-09-20 02:00:23 +00:00 · 2026-07-18 14:02:17 +02:00
parent 261675f4d3 5dbc642530
commit 9dcb25b4ae
4 changed files with 17 additions and 4 deletions
@@ -308,6 +308,11 @@ readonly class ContainerDefinitionFetcher {
                $capAdd = $entry['cap_add'];
            }

+            $capDrop = [];
+            if (isset($entry['cap_drop'])) {
+                $capDrop = $entry['cap_drop'];
+            }
+
            $shmSize = -1;
            if (isset($entry['shm_size'])) {
                $shmSize = $entry['shm_size'];
@@ -370,6 +375,7 @@ readonly class ContainerDefinitionFetcher {
                $devices,
                $enableNvidiaGpu,
                $capAdd,
+                $capDrop,
                $shmSize,
                $apparmorUnconfined,
                $backupVolumes,