launchpad-reviewers team mailing list archive

[Robert C Jennings <robert.jennings@xxxxxxxxxxxxx>]

Robert C Jennings has proposed merging lp:~rcj/launchpad-buildd/lp1716060 into lp:launchpad-buildd.

Requested reviews:
  Launchpad code reviewers (launchpad-reviewers)
Related bugs:
  Bug #1716060 in launchpad-buildd: "s390x images fail to build Could not get file mapping"
  https://bugs.launchpad.net/launchpad-buildd/+bug/1716060

For more details, see:
https://code.launchpad.net/~rcj/launchpad-buildd/lp1716060/+merge/330527
-- 
Your team Launchpad code reviewers is requested to review the proposed merge of lp:~rcj/launchpad-buildd/lp1716060 into lp:launchpad-buildd.

=== modified file 'lpbuildd/target/lxd.py'
--- lpbuildd/target/lxd.py	2017-09-08 00:04:23 +0000
+++ lpbuildd/target/lxd.py	2017-09-11 15:15:12 +0000
@@ -266,6 +266,8 @@
 
         raw_lxc_config = [
             ("lxc.aa_profile", "unconfined"),
+            ("lxc.cap.drop", ""),
+            ("lxc.cap.drop", "sys_time sys_module mac_admin mac_override"),
             ("lxc.cgroup.devices.deny", ""),
             ("lxc.cgroup.devices.allow", ""),
             ("lxc.mount.auto", ""),