mirror of
https://github.com/truenas/charts.git
synced 2026-04-26 03:22:45 +08:00
795dbd0234
* initial commit * common files * templates * typo * add migration * todo * envs * fixeas * cool user * typo * reduce logging * setpcap * uniq mount points * fix path * caps for nginx * nginx caps * nginx * add metadata * add ui * bump version * portal * test values * add migration * fix checks * wait for collab * fix migration * version bump * add default dictionaries * custom params
28 lines
846 B
YAML
28 lines
846 B
YAML
runAsContext:
|
|
- userName: cool
|
|
groupName: cool
|
|
uid: 100
|
|
gid: 101
|
|
description: Collabora runs as non-root user.
|
|
- userName: root
|
|
groupName: root
|
|
gid: 0
|
|
uid: 0
|
|
description: Nginx runs as root user.
|
|
capabilities:
|
|
- name: CHOWN
|
|
description: Collabora and Nginx are able to chown files.
|
|
- name: SETPCAP
|
|
description: Collabora is able to set process capabilities.
|
|
- name: FOWNER
|
|
description: Collabora is able to bypass permission checks for it's sub-processes.
|
|
- name: SYS_CHROOT
|
|
description: Collabora is able to use chroot.
|
|
- name: SETGID
|
|
description: Nginx is able to set group ID for it's sub-processes.
|
|
- name: SETUID
|
|
description: Nginx is able to set user ID for it's sub-processes.
|
|
- name: MKNOD
|
|
description: Collabora is able to create device nodes.
|
|
hostMounts: []
|