From bd367f52af26f069804902b7da179767984f50ee Mon Sep 17 00:00:00 2001 From: Michael Fraenkel Date: Wed, 30 Jun 2021 10:23:47 -0600 Subject: [PATCH] PLAT-1214: Force rootless builds There is currently no ideal why to detect when we are root but running rootless. For now just force rootless builds. --- internal/builder/embedded/bkimage/workeropt.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/builder/embedded/bkimage/workeropt.go b/internal/builder/embedded/bkimage/workeropt.go index 31d09cff..8f4b4e1b 100644 --- a/internal/builder/embedded/bkimage/workeropt.go +++ b/internal/builder/embedded/bkimage/workeropt.go @@ -28,7 +28,7 @@ func (c *Client) createWorkerOpt() (opt base.WorkerOpt, err error) { } // worker executor - unprivileged := system.GetParentNSeuid() != 0 + unprivileged := true c.logger.V(1).Info(fmt.Sprintf("Executor running unprivileged: %t", unprivileged)) exeOpt := runcexecutor.Opt{