parent
a77617ae96
commit
56f38ad451
@ -0,0 +1,15 @@ |
||||
#!/usr/bin/env bash |
||||
|
||||
set -e |
||||
|
||||
entrypoint="$(nix-build --no-out-link -A tests)" |
||||
this_user="$(whoami)" |
||||
|
||||
echo "Requesting sudo in order to set thread capabilities, will drop back down to user '$this_user' immediately" |
||||
|
||||
sudo -E capsh \ |
||||
--caps="cap_net_admin+eip cap_setpcap,cap_setuid,cap_setgid+ep" \ |
||||
--keep=1 \ |
||||
--user="$this_user" \ |
||||
--addamb=cap_net_admin \ |
||||
-- "$entrypoint" "$@" |
Loading…
Reference in new issue