diff options
| author | Emily <vcs@emily.moe> | 2020-03-23 17:58:36 +0000 |
|---|---|---|
| committer | Emily <vcs@emily.moe> | 2020-04-18 05:15:47 +0100 |
| commit | 695fd78ac45763b02ae4c68abda28974bb72c96b (patch) | |
| tree | cfcc35adf4be1ababcc06e1506fd0407227ad701 /nixos/tests | |
| parent | d0f04c1623ae74f256ff5ced77ac78c7fe3b6abc (diff) | |
nixos/tests/acme: use CAP_NET_BIND_SERVICE
Diffstat (limited to 'nixos/tests')
| -rw-r--r-- | nixos/tests/acme.nix | 3 | ||||
| -rw-r--r-- | nixos/tests/common/acme/server/default.nix | 3 |
2 files changed, 2 insertions, 4 deletions
diff --git a/nixos/tests/acme.nix b/nixos/tests/acme.nix index 032432287bd0..693f02962f45 100644 --- a/nixos/tests/acme.nix +++ b/nixos/tests/acme.nix @@ -33,8 +33,7 @@ in import ./make-test-python.nix { serviceConfig = { ExecStart = "${pkgs.pebble}/bin/pebble-challtestsrv -dns01 ':53' -defaultIPv6 '' -defaultIPv4 '${nodes.webserver.config.networking.primaryIPAddress}'"; # Required to bind on privileged ports. - User = "root"; - Group = "root"; + AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; }; }; }; diff --git a/nixos/tests/common/acme/server/default.nix b/nixos/tests/common/acme/server/default.nix index fdc053a2d828..1d6c2cc9d30a 100644 --- a/nixos/tests/common/acme/server/default.nix +++ b/nixos/tests/common/acme/server/default.nix @@ -126,8 +126,7 @@ in { ''; serviceConfig = { # Required to bind on privileged ports. - User = "root"; - Group = "root"; + AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; }; }; }; |