Disable seccomp and apparmor for the runner in nomad. Fixes #1306

hashicorp · May 6, 2021 · 5b1a74d · 5b1a74d
1 parent cea1b37
commit 5b1a74d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/internal/serverinstall/nomad.go b/internal/serverinstall/nomad.go
@@ -704,6 +704,10 @@ func waypointRunnerNomadJob(c nomadConfig, opts *InstallRunnerOpts) *api.Job {
 			"-vvv",
 		},
 		"auth_soft_fail": c.authSoftFail,
+		"security_opt": []string{
+			"seccomp=unconfined",
+			"apparmor=unconfined",
+		},
 	}
 
 	cpu := defaultResourcesCPU