Add log entry if SYS_MODULE cap can be removed

pull/217/head
TheSpad 2 years ago
parent d022c05941
commit 521fb007dd
No known key found for this signature in database
GPG Key ID: 08F06191F4587860

@ -9,6 +9,9 @@ if ip link add dev test type wireguard; then
echo "**** It seems the wireguard module is already active. Skipping kernel header install and module compilation. ****"
SKIP_COMPILE="true"
ip link del dev test
if capsh --print | grep -qv '\!cap_sys_module'; then
echo "**** As the wireguard module is already active you can remove the SYS_MODULE capability from your container run/compose. ****"
fi
else
echo "**** The wireguard module is not active, will attempt kernel header install and module compilation. If you believe that your kernel should have wireguard support already, make sure that it is activated via modprobe! ****"
fi

Loading…
Cancel
Save