spread: run docker container as unconfined to allow mount syscall

canonical · Aug 1, 2024 · 9d783ef · 9d783ef
1 parent 98d1ba6
commit 9d783ef
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/spread.yaml b/spread.yaml
@@ -17,7 +17,8 @@ backends:
       echo "Allocating $SPREAD_SYSTEM..."
       docker_image=$(echo $SPREAD_SYSTEM | awk -F '-' '{print $1":"$2}')
       docker_arch=$(echo $SPREAD_SYSTEM | awk -F '-' '{print $NF}')
-      docker run --cap-add SYS_ADMIN --rm -e DEBIAN_FRONTEND=noninteractice \
+      docker run --cap-add SYS_ADMIN --security-opt apparmor=unconfined \
+        --rm -e DEBIAN_FRONTEND=noninteractice \
         -e usr=$SPREAD_SYSTEM_USERNAME -e pass=$SPREAD_SYSTEM_PASSWORD \
         --name $SPREAD_SYSTEM -d $docker_arch/$docker_image sh -c '
         set -x