Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-12283

Be able to execute ICMP requests through Java when running as non-root

    XMLWordPrintable

    Details

    • Type: Enhancement
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 24.1.3
    • Fix Version/s: 25.0.0
    • Component/s: Container Image
    • Security Level: Default (Default Security Scheme)
    • Labels:
      None
    • Sprint:
      Horizon 2019 - September 11th, Horizon 2019 - September 18th

      Description

      When running Minion and Sentinel the java process needs capabilities to send ICMP packets. Alejandro enhanced the Horizon image with setting cap_net_raw capabilities for the java binary, so that way we don't rely on external kernel settings of the container host system. These setting should also be set in the Minion and Sentinel image.

      setcap cap_net_raw+ep ${JAVA_HOME}/bin/java

        Attachments

          Activity

            People

            • Assignee:
              indigo Ronny Trommer
              Reporter:
              indigo Ronny Trommer
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: