Repository navigation
[v0.13] allow network.host daemon entitlement by default in container drivers #2255
Description
Description
Based on comments in moby/buildkit#4524 (comment) , there shouldn't be a need to set --allowed-entitlemtns network.host as buildkitd flags when builder runs in a container as the container network is already isolated. At least when --driver-opt network does not equal host.
Reacted by dm17 and Paul "TBBle" Hampson
Activity
crazy-max commentedon Feb 13, 2024
I think it would also makes sense for
kubernetesdriver (cc @AkihiroSuda)crazy-max commentedon Feb 13, 2024
I was wondering one thing. Should we set this entitlement silently when creating the builder or set it in buildx store? I think silently makes sense.