Merge branch 'develop_kuzhi' into 'develop'

bugfix: can't use sudo command When use ssh connect to container, can't use sudo command, ``` $sudo ls sudo: must be setuid root ``` fix: opencontainers/runc#705 Signed-off-by: Rudy Zhang <[email protected]> See merge request !77376
AliyunContainerService · Aug 16, 2018 · 33dd176 · 33dd176
2 parents 6c7edb5 + a9642b1
commit 33dd176
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/daemon/mgr/spec.go b/daemon/mgr/spec.go
@@ -33,6 +33,11 @@ func createSpec(ctx context.Context, c *Container, specWrapper *SpecWrapper) err
 	if err != nil {
 		return errors.Wrapf(err, "failed to generate spec: %s", c.ID)
 	}
+
+	// fix https://github.com/opencontainers/runc/issues/705
+	// use ssh connect to container, can't use sudo command.
+	s.Process.NoNewPrivileges = false
+
 	specWrapper.s = s
 
 	s.Hostname = c.Config.Hostname.String()