updates
This commit is contained in:
@@ -27,7 +27,6 @@
|
|||||||
kubectl
|
kubectl
|
||||||
kubernetes-helm
|
kubernetes-helm
|
||||||
curl
|
curl
|
||||||
sudo
|
|
||||||
];
|
];
|
||||||
settings = {
|
settings = {
|
||||||
container = {
|
container = {
|
||||||
@@ -115,6 +114,7 @@
|
|||||||
RestrictAddressFamilies = lib.mkForce [ ];
|
RestrictAddressFamilies = lib.mkForce [ ];
|
||||||
ReadWritePaths = lib.mkForce [ ];
|
ReadWritePaths = lib.mkForce [ ];
|
||||||
BindReadOnlyPaths = lib.mkForce [ ];
|
BindReadOnlyPaths = lib.mkForce [ ];
|
||||||
|
BindPaths = lib.mkForce [ "/run/wrappers" ];
|
||||||
|
|
||||||
DeviceAllow = lib.mkForce [ "/dev/zfs rw" ];
|
DeviceAllow = lib.mkForce [ "/dev/zfs rw" ];
|
||||||
DevicePolicy = lib.mkForce "auto";
|
DevicePolicy = lib.mkForce "auto";
|
||||||
|
|||||||
Reference in New Issue
Block a user