浏览代码

c8d/exec: Add additional groups on exec

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
Laura Brehm 1 年之前
父节点
当前提交
d7266afc7e
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      daemon/exec_linux.go

+ 1 - 0
daemon/exec_linux.go

@@ -41,6 +41,7 @@ func getUserFromContainerd(ctx context.Context, containerdCli *containerd.Client
 		coci.WithUser(ec.User),
 		withResetAdditionalGIDs(),
 		coci.WithAdditionalGIDs(ec.User),
+		coci.WithAppendAdditionalGroups(ec.Container.HostConfig.GroupAdd...),
 	}
 	for _, opt := range opts {
 		if err := opt(ctx, containerdCli, &cinfo, spec); err != nil {