feat(machined): do not drop SYS_MODULE

It is needed by the nvidia operator machinery. Signed-off-by: Jean-Francois Roy <[email protected]>
siderolabs · Sep 18, 2024 · f37efac · f37efac
1 parent 806b6aa
commit f37efac
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/pkg/machinery/constants/constants.go b/pkg/machinery/constants/constants.go
@@ -1071,8 +1071,7 @@ var Overlays = []string{
 
 // DefaultDroppedCapabilities is the default set of capabilities to drop.
 var DefaultDroppedCapabilities = map[string]struct{}{
-	"cap_sys_boot":   {},
-	"cap_sys_module": {},
+	"cap_sys_boot": {},
 }
 
 // UdevdDroppedCapabilities is the set of capabilities to drop for udevd.