Skip to content

jibri: fail to start if the SYS_ADMIN cap is missing #1816

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 30, 2024

Conversation

saghul
Copy link
Member

@saghul saghul commented May 30, 2024

The container will refuse to start and provide some useful information to the user:

docker-jitsi-meet-jibri-1    | cap[cap_sys_admin] not permitted
docker-jitsi-meet-jibri-1    | Required capability SYS_ADMIN is missing
docker-jitsi-meet-jibri-1    | [cont-init.d] 10-config: exited 1.
docker-jitsi-meet-jibri-1    | [cont-finish.d] executing container finish scripts...
docker-jitsi-meet-jibri-1    | [cont-finish.d] done.
docker-jitsi-meet-jibri-1    | [s6-finish] waiting for services.

The container will refuse to start and provide some useful information
to the user:

```
docker-jitsi-meet-jibri-1    | cap[cap_sys_admin] not permitted
docker-jitsi-meet-jibri-1    | Required capability SYS_ADMIN is missing
docker-jitsi-meet-jibri-1    | [cont-init.d] 10-config: exited 1.
docker-jitsi-meet-jibri-1    | [cont-finish.d] executing container finish scripts...
docker-jitsi-meet-jibri-1    | [cont-finish.d] done.
docker-jitsi-meet-jibri-1    | [s6-finish] waiting for services.
```
@saghul saghul requested a review from aaronkvanmeerten May 30, 2024 15:31
@aaronkvanmeerten aaronkvanmeerten merged commit 1d3c0f1 into master May 30, 2024
1 check passed
@aaronkvanmeerten aaronkvanmeerten deleted the jibri-check-cap branch May 30, 2024 17:07
le-firehawk pushed a commit to le-firehawk/docker-jitsi-meet that referenced this pull request Jun 6, 2024
The container will refuse to start and provide some useful information
to the user:

```
docker-jitsi-meet-jibri-1    | cap[cap_sys_admin] not permitted
docker-jitsi-meet-jibri-1    | Required capability SYS_ADMIN is missing
docker-jitsi-meet-jibri-1    | [cont-init.d] 10-config: exited 1.
docker-jitsi-meet-jibri-1    | [cont-finish.d] executing container finish scripts...
docker-jitsi-meet-jibri-1    | [cont-finish.d] done.
docker-jitsi-meet-jibri-1    | [s6-finish] waiting for services.
```
saghul added a commit that referenced this pull request Jul 2, 2024
* b4604f3 feat(whiteboard) add builtin whiteboard integration
* 49bd165 feat(jibri) update Chrome to 126
* 980703b fix(jibri): display modes in xorg config
* c65d2bd feat(jigasi,jicofo,jvb,jibri,prosody): add healthcheck.sh scripts and prosody http_health mod
* d2ac43d feat(jigasi): Add new environment variables for jigasi configuration (#1841)
* fbc250e feat(prosody): openmetrics module support (#1832)
* 2adac72 feat(prosody): Drop non existing config.
* e22b4f3 feat(jibri): Adds more fonts.
* 982e577 feat(jicofo,jvb,web) default to using SCTP based datachannels
* 55c975f fix(jicofo): use integer for port value to fix addition (#1826)
* 7c8763f base: update tpl to version 1.3.0
* 1d3c0f1 jibri: fail to start if the SYS_ADMIN cap is missing (#1816)
* cacee4e jvb: adds autoscaler sidecar hook to signal final shutdown (#1809)
* 726b0f0 jibri: adds autoscaler sidecar hook to signal final shutdown (#1810)
* f2b2cc4 etherpad: update image version and settings
* 731d6d1 base: update tpl to make toBool more resilient
* 59c4eb2 jvb: add fallback WS server ID
* 9a54843 jvb: add ability to configure the TLS option for colibri WS
* 79a4635 jvb: add ability to disable XMPP
* 77ce86a jvb: add ability to enable SCTP datachannels
* 76ffaa7 jicofo, jvb: fix OCTO + SCTP behaviour
* 0298a30 misc: working on unstable
Pie-D pushed a commit to Pie-D/docker-jitsi-meet that referenced this pull request Feb 6, 2025
The container will refuse to start and provide some useful information
to the user:

```
docker-jitsi-meet-jibri-1    | cap[cap_sys_admin] not permitted
docker-jitsi-meet-jibri-1    | Required capability SYS_ADMIN is missing
docker-jitsi-meet-jibri-1    | [cont-init.d] 10-config: exited 1.
docker-jitsi-meet-jibri-1    | [cont-finish.d] executing container finish scripts...
docker-jitsi-meet-jibri-1    | [cont-finish.d] done.
docker-jitsi-meet-jibri-1    | [s6-finish] waiting for services.
```
Pie-D pushed a commit to Pie-D/docker-jitsi-meet that referenced this pull request Feb 6, 2025
* 8087d07 feat(whiteboard) add builtin whiteboard integration
* f6590c8 feat(jibri) update Chrome to 126
* 2ca935b fix(jibri): display modes in xorg config
* 5a1f2c8 feat(jigasi,jicofo,jvb,jibri,prosody): add healthcheck.sh scripts and prosody http_health mod
* 88d7666 feat(jigasi): Add new environment variables for jigasi configuration (jitsi#1841)
* e4521a1 feat(prosody): openmetrics module support (jitsi#1832)
* 0fe1a9d feat(prosody): Drop non existing config.
* 872ee77 feat(jibri): Adds more fonts.
* b5e0356 feat(jicofo,jvb,web) default to using SCTP based datachannels
* 50b38bd fix(jicofo): use integer for port value to fix addition (jitsi#1826)
* 582c383 base: update tpl to version 1.3.0
* 6ed3f1f jibri: fail to start if the SYS_ADMIN cap is missing (jitsi#1816)
* 509702b jvb: adds autoscaler sidecar hook to signal final shutdown (jitsi#1809)
* a641440 jibri: adds autoscaler sidecar hook to signal final shutdown (jitsi#1810)
* f2e34d6 etherpad: update image version and settings
* 988acf0 base: update tpl to make toBool more resilient
* 7eff228 jvb: add fallback WS server ID
* 959bdcb jvb: add ability to configure the TLS option for colibri WS
* 3b84808 jvb: add ability to disable XMPP
* 48db4b2 jvb: add ability to enable SCTP datachannels
* 716c5f7 jicofo, jvb: fix OCTO + SCTP behaviour
* 212f1a6 misc: working on unstable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants