Compare commits

..

2 Commits

Author SHA1 Message Date
8427663d71 remove cap drop 2026-02-02 16:17:16 +11:00
22472c633d fixed indent 2026-02-02 16:03:43 +11:00

View File

@@ -27,7 +27,7 @@ spec:
- | - |
# 1. Fix data volume permissions # 1. Fix data volume permissions
chown -R 1000:0 /data && chmod -R 775 /data chown -R 1000:0 /data && chmod -R 775 /data
# 2. Setup writable SSH tirectory from Secret # 2. Setup writable SSH tirectory from Secret
cp /mnt/keys/authorized_keys /working-ssh/ cp /mnt/keys/authorized_keys /working-ssh/
chown 1000:0 /working-ssh/authorized_keys chown 1000:0 /working-ssh/authorized_keys
@@ -37,7 +37,7 @@ spec:
mountPath: /data mountPath: /data
- name: ssh-keys-secret - name: ssh-keys-secret
mountPath: /mnt/keys mountPath: /mnt/keys
- name: ssh-working - name: ssh-working
mountPath: /working-ssh mountPath: /working-ssh
containers: containers:
- name: clawdbox - name: clawdbox
@@ -76,9 +76,7 @@ spec:
runAsUser: 1000 runAsUser: 1000
runAsGroup: 1000 runAsGroup: 1000
fsGroup: 1000 fsGroup: 1000
allowPrivilegeEscalation: false allowPrivilegeEscalation: true
capabilities:
drop: ["ALL"]
volumes: volumes:
- name: data-volume - name: data-volume
persistentVolumeClaim: persistentVolumeClaim:
@@ -88,4 +86,4 @@ spec:
secretName: clawdbox-ssh-keys secretName: clawdbox-ssh-keys
defaultMode: 0600 defaultMode: 0600
- name: ssh-working - name: ssh-working
emptyDir: {} emptyDir: {}