hs-test: run containers wit --cap-add=SYS_PTRACE

otherwise you might not be able attach gdb to vpp running in container

Type: test

Change-Id: I4507971123ee67939b3a843916a6d523a2a09801
Signed-off-by: Matus Fabian <[email protected]>

diff --git a/extras/hs-test/infra/container.go b/extras/hs-test/infra/container.go
index 5a3f9f3..8ea694d 100644 (file)
--- a/extras/hs-test/infra/container.go
+++ b/extras/hs-test/infra/container.go
@@ -130,7 +130,7 @@ func (c *Container) GetContainerWorkDir() (res string) {
 
 func (c *Container) getContainerArguments() string {
        args := "--ulimit nofile=90000:90000 --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE " +
-               "--cap-add=IPC_LOCK --device /dev/net/tun:/dev/net/tun --device /dev/vhost-net:/dev/vhost-net"
+               "--cap-add=IPC_LOCK --cap-add=SYS_PTRACE --device /dev/net/tun:/dev/net/tun --device /dev/vhost-net:/dev/vhost-net"
        args += c.getVolumesAsCliOption()
        args += c.getEnvVarsAsCliOption()
        if *VppSourceFileDir != "" {
@@ -198,7 +198,7 @@ func (c *Container) Create() error {
                                        },
                                },
                        },
-                       CapAdd:      []string{"NET_ADMIN", "SYS_RESOURCE", "IPC_LOCK"},
+                       CapAdd:      []string{"NET_ADMIN", "SYS_RESOURCE", "IPC_LOCK", "SYS_PTRACE"},
                        NetworkMode: "container:ginkgo",
                        Binds:       c.getVolumesAsSlice(),
                },