net-plugin: bind mount /lib/modules
Otherwise, the plugin is not able to load kernel modules (openvswitch, vxlan, vport_vxlan) required by fastdp which makes weave to fallback to sleeve. CAP_SYS_MODULE is required in order to load kernel modules.
This commit is contained in:
1 parent
a1fb08216e
commit
462033dc99
1 file changed
+8
-1
@@ -13,7 +13,8 @@
|
||||
"linux": {
|
||||
"capabilities": [
|
||||
"CAP_SYS_ADMIN",
|
||||
"CAP_NET_ADMIN"
|
||||
"CAP_NET_ADMIN",
|
||||
"CAP_SYS_MODULE"
|
||||
]
|
||||
},
|
||||
"mounts": [
|
||||
@@ -40,6 +41,12 @@
|
||||
"source": "/etc/",
|
||||
"type": "bind",
|
||||
"options": ["rbind"]
|
||||
},
|
||||
{
|
||||
"destination": "/lib/modules/",
|
||||
"source": "/lib/modules/",
|
||||
"type": "bind",
|
||||
"options": ["rbind"]
|
||||
}
|
||||
],
|
||||
"env": [
|
||||
|
||||
Reference in new issue
Block a user