Do Jenkins needs the sys_chroot capability to run on openshift-4

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Do Jenkins needs the sys_chroot capability to run on openshift-4

Sameer Khamkar

Hello Team,

 

we are shipping our Jenkins container on openshift platform, but it seems that we need to enable sys_chroot capabilities on openshift cluster to get Jenkins functional for openshift-4,

earlier we were using openshift-3 and by default this capability was enabled in version-3 but now due to security Redhat has kept this disabled.

So my question is do Jenkins needs the sys_chroot capability to run or it can run without sys chroot capabilities. if yes then why ?

your guidance will help us to configure our openshift cluster accordingly with security constraints. 


Regards,

Sameer 

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAC%3DCD%3DkCYfmsiK%3DTNrp31yS9xT0mRe4yjRj2zLQLLXUZ0i1TaQ%40mail.gmail.com.
Reply | Threaded
Open this post in threaded view
|

Re: Do Jenkins needs the sys_chroot capability to run on openshift-4

Sameer Khamkar
Can someone please help me here?

On Thu, 11 Mar 2021, 5:28 pm Sameer Khamkar, <[hidden email]> wrote:

Hello Team,

 

we are shipping our Jenkins container on openshift platform, but it seems that we need to enable sys_chroot capabilities on openshift cluster to get Jenkins functional for openshift-4,

earlier we were using openshift-3 and by default this capability was enabled in version-3 but now due to security Redhat has kept this disabled.

So my question is do Jenkins needs the sys_chroot capability to run or it can run without sys chroot capabilities. if yes then why ?

your guidance will help us to configure our openshift cluster accordingly with security constraints. 


Regards,

Sameer 

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAC%3DCD%3Dn6s9nknaOXX5ZPLeaoObBVo70x929s4ocRgzu_3ZYBqg%40mail.gmail.com.