Merge pull request #51 from m-lab/sandbox-kinkade

Sets cap_net_raw capability on packet-headers binary
m-lab · Apr 7, 2023 · 4d21ab4 · 4d21ab4
2 parents fce28bd + 2fce1bf
commit 4d21ab4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -10,7 +10,8 @@ RUN chmod a+rx /go/bin/packet-headers
 
 # Put it in its own image.
 FROM alpine:3.16
-RUN apk --no-cache add libpcap
+RUN apk --no-cache add libpcap libcap
 COPY --from=build /go/bin/packet-headers /packet-headers
+RUN setcap cap_net_raw=ep /packet-headers
 WORKDIR /
 ENTRYPOINT ["/packet-headers"]