Make apt container privileged

This makes the main container within the apt daemonset run as
privileged, which is required to perform kernel upgrades through it.
It was confirmed that even with all capabilities enabled, an
unprivileged apt is unable to perform the necessary updates to
the boot partition during a kernel upgrade.

Change-Id: I4e996794f24fcfc9d8ced7a58cecd2ceec36f6c5
This commit is contained in:
Matt McEuen 2019-07-15 17:19:49 -05:00
parent 2464c3b036
commit ab6db0f11c
1 changed files with 2 additions and 0 deletions

View File

@ -48,6 +48,8 @@ spec:
mountPath: /tmp/{{ $daemonset }}.sh
subPath: {{ $daemonset }}
readOnly: true
securityContext:
privileged: true
volumes:
- name: rootfs-{{ $daemonset }}
hostPath: