allow scrutiny to access all block devices

Signed-off-by: Simon L. <szaimen@e.mail.de>
This commit is contained in:
Simon L.
2026-06-08 11:49:54 +02:00
parent 52f8dc9043
commit aadadf4460
+4
View File
@@ -478,6 +478,10 @@ readonly class DockerActionManager {
$regEx = '/\s+(?=--o:)/'; $regEx = '/\s+(?=--o:)/';
$requestBody['Cmd'] = preg_split($regEx, rtrim($this->configurationManager->collaboraAdditionalOptions)); $requestBody['Cmd'] = preg_split($regEx, rtrim($this->configurationManager->collaboraAdditionalOptions));
} }
// Special things for the scrutiny container which should not be exposed in the containers.json
} elseif ($container->identifier === 'nextcloud-aio-scrutiny') {
// Allow it to access block devices
$requestBody['HostConfig']['DeviceCgroupRules'] = ["b *:* rmw"];
} }
if (count($mounts) > 0) { if (count($mounts) > 0) {