From 3698e995de86421b29ecc238781c6f3b603d2d99 Mon Sep 17 00:00:00 2001 From: Matus Fabian Date: Wed, 30 Jul 2025 12:22:41 -0400 Subject: [PATCH] hs-test: run containers wit --cap-add=SYS_PTRACE otherwise you might not be able attach gdb to vpp running in container Type: test Change-Id: I4507971123ee67939b3a843916a6d523a2a09801 Signed-off-by: Matus Fabian --- extras/hs-test/infra/container.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/extras/hs-test/infra/container.go b/extras/hs-test/infra/container.go index 5a3f9f3aa2f..8ea694dace9 100644 --- a/extras/hs-test/infra/container.go +++ b/extras/hs-test/infra/container.go @@ -130,7 +130,7 @@ func (c *Container) GetContainerWorkDir() (res string) { func (c *Container) getContainerArguments() string { args := "--ulimit nofile=90000:90000 --cap-add=NET_ADMIN --cap-add=SYS_RESOURCE " + - "--cap-add=IPC_LOCK --device /dev/net/tun:/dev/net/tun --device /dev/vhost-net:/dev/vhost-net" + "--cap-add=IPC_LOCK --cap-add=SYS_PTRACE --device /dev/net/tun:/dev/net/tun --device /dev/vhost-net:/dev/vhost-net" args += c.getVolumesAsCliOption() args += c.getEnvVarsAsCliOption() if *VppSourceFileDir != "" { @@ -198,7 +198,7 @@ func (c *Container) Create() error { }, }, }, - CapAdd: []string{"NET_ADMIN", "SYS_RESOURCE", "IPC_LOCK"}, + CapAdd: []string{"NET_ADMIN", "SYS_RESOURCE", "IPC_LOCK", "SYS_PTRACE"}, NetworkMode: "container:ginkgo", Binds: c.getVolumesAsSlice(), }, -- 2.16.6