Mike/devops-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Drop all Linux capabilities for app container
CI / smoke-test (push) Successful in 59s
Details

Browse Source
This commit is contained in:
Mikhail Lobanov
2026-10-14 21:50:42 +03:00
parent e79f41d2b9
commit 4db8fd6583
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yaml
+3
View File
@@ -72,6 +72,7 @@ jobs:
--name devops-platform \ --name devops-platform \
--restart unless-stopped \ --restart unless-stopped \
--read-only \ --read-only \
--cap-drop=ALL \
-p 127.0.0.1:8000:8000 \ -p 127.0.0.1:8000:8000 \
"$IMAGE"; then "$IMAGE"; then
echo "New container started" echo "New container started"
@@ -81,6 +82,7 @@ jobs:
--name devops-platform \ --name devops-platform \
--restart unless-stopped \ --restart unless-stopped \
--read-only \ --read-only \
--cap-drop=ALL \
-p 127.0.0.1:8000:8000 \ -p 127.0.0.1:8000:8000 \
"$OLD_IMAGE" "$OLD_IMAGE"
exit 1 exit 1
@@ -107,6 +109,7 @@ jobs:
--name devops-platform \ --name devops-platform \
--restart unless-stopped \ --restart unless-stopped \
--read-only \ --read-only \
--cap-drop=ALL \
-p 127.0.0.1:8000:8000 \ -p 127.0.0.1:8000:8000 \
"$OLD_IMAGE" "$OLD_IMAGE"
exit 1 exit 1