summaryrefslogtreecommitdiffstats
path: root/node-admin
diff options
context:
space:
mode:
authorHarald Musum <musum@yahoo-inc.com>2017-07-24 12:45:36 +0200
committerHarald Musum <musum@yahoo-inc.com>2017-07-24 12:45:36 +0200
commit8ea1b86576f4af2971cd966374ae16a9b7ba7c84 (patch)
tree007f3605a8b5265179c3a25dc6ff036e63bf3b97 /node-admin
parentc58e755f413785abce9372a202d2599593f04dec (diff)
Add SYS_ADMIN (CAP_SYS_ADMIN) capability to be able to run 'perf'
Diffstat (limited to 'node-admin')
-rw-r--r--node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java3
1 files changed, 2 insertions, 1 deletions
diff --git a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java
index 1eb26ede612..4409fa63133 100644
--- a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java
+++ b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java
@@ -118,7 +118,8 @@ public class DockerOperationsImpl implements DockerOperations {
.withUlimit("nofile", 262_144, 262_144)
.withUlimit("nproc", 32_768, 409_600)
.withUlimit("core", -1, -1)
- .withAddCapability("SYS_PTRACE"); // Needed for gcore, pstack etc.
+ .withAddCapability("SYS_PTRACE") // Needed for gcore, pstack etc.
+ .withAddCapability("SYS_ADMIN"); // Needed for perf
if (environment.isRunningLocally()) {
command.withEntrypoint("/usr/local/bin/start-services.sh", "--run-local");