Singlestore jdbc Quarkus native support: Docker with security elevated

quarkiverse · Oct 21, 2024 · c6b3e9b · c6b3e9b
1 parent 6447a29
commit c6b3e9b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/...main/java/io/quarkiverse/jdbc/singlestore/deployment/SinglestoreDevServicesProcessor.java b/...main/java/io/quarkiverse/jdbc/singlestore/deployment/SinglestoreDevServicesProcessor.java
@@ -77,7 +77,8 @@ public RunningDevServicesDatasource startDatabase(Optional<String> username, Opt
                     File dbUserSqlFile = dbUserSql.toFile();
                     dbUserSqlFile.deleteOnExit();
                     container.withCreateContainerCmdModifier(it -> HostConfig.newHostConfig().withCapAdd(Capability.SYS_ADMIN)
-                            .withSecurityOpts(List.of("apparmor:unconfined")));
+                            .withSecurityOpts(
+                                    List.of("apparmor:unconfined", "label=disable", "seccomp=unconfined", "unmask=all")));
                     container.withFileSystemBind(dbUserSqlFile.getAbsolutePath(), "/init.sql", BindMode.READ_ONLY);
                     //                    container.withPrivilegedMode(true);
                 } catch (IOException e) {