From 462033dc9965d4b6478766fd71e309717195e631 Mon Sep 17 00:00:00 2001 From: Martynas Pumputis Date: Fri, 4 Aug 2017 14:14:55 +0200 Subject: [PATCH] net-plugin: bind mount /lib/modules Otherwise, the plugin is not able to load kernel modules (openvswitch, vxlan, vport_vxlan) required by fastdp which makes weave to fallback to sleeve. CAP_SYS_MODULE is required in order to load kernel modules. --- prog/net-plugin/config.json | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/prog/net-plugin/config.json b/prog/net-plugin/config.json index bb6fcddd..d0615bbe 100644 --- a/prog/net-plugin/config.json +++ b/prog/net-plugin/config.json @@ -13,7 +13,8 @@ "linux": { "capabilities": [ "CAP_SYS_ADMIN", - "CAP_NET_ADMIN" + "CAP_NET_ADMIN", + "CAP_SYS_MODULE" ] }, "mounts": [ @@ -40,6 +41,12 @@ "source": "/etc/", "type": "bind", "options": ["rbind"] + }, + { + "destination": "/lib/modules/", + "source": "/lib/modules/", + "type": "bind", + "options": ["rbind"] } ], "env": [