fix #8165 -- compute servers: when starting containers that need sudo…

…, pass " --security-opt no-new-privileges=false " to the Docker command.
sagemathinc · Jan 29, 2025 · db3d90b · db3d90b
1 parent c7aab4d
commit db3d90b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/packages/server/compute/cloud/startup-script.ts b/src/packages/server/compute/cloud/startup-script.ts
@@ -400,6 +400,7 @@ chown 2001:2001 /ephemeral
 docker run \
  -d \
  --name=filesystem \
+ --security-opt no-new-privileges=false \
  --privileged \
  --memory "$TOTAL_RAM"g --memory-swap "$TOTAL_RAM"g \
  --mount type=bind,source=/data,target=/data,bind-propagation=rshared \
@@ -486,6 +487,7 @@ if [ $? -ne 0 ]; then
   docker run -d ${gpu ? GPU_FLAGS : ""} \
    --name=compute \
    --network host \
+   --security-opt no-new-privileges=false \
    --privileged \
    --memory "$TOTAL_RAM"g --memory-swap "$TOTAL_RAM"g \
    --mount type=bind,source=/data,target=/data,bind-propagation=rshared \