LAB-linuxserver/docker-wireguard
1
0
Fork 0
mirror of https://github.com/linuxserver/docker-wireguard.git synced 2026-02-20 05:45:43 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add log entry if SYS_MODULE cap can be removed

Browse Source
This commit is contained in:
TheSpad 2022-11-30 15:40:18 +00:00
parent d022c05941
commit 521fb007dd
No known key found for this signature in database
GPG Key ID: 08F06191F4587860
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
root/etc/s6-overlay/s6-rc.d/init-wireguard-module/run
View File

@ -9,6 +9,9 @@ if ip link add dev test type wireguard; then
echo "**** It seems the wireguard module is already active. Skipping kernel header install and module compilation. ****"
SKIP_COMPILE="true"
ip link del dev test
if capsh --print | grep -qv '\!cap_sys_module'; then
echo "**** As the wireguard module is already active you can remove the SYS_MODULE capability from your container run/compose. ****"
fi
else
echo "**** The wireguard module is not active, will attempt kernel header install and module compilation. If you believe that your kernel should have wireguard support already, make sure that it is activated via modprobe! ****"
fi