Remove net_bind_service capability by default

Signed-off-by: Waldemar Quevedo <[email protected]>
nats-io · May 22, 2024 · 15e9a34 · 15e9a34
1 parent 8d800ec
commit 15e9a34
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 12 deletions.
diff --git a/2.10.x/alpine3.19/Dockerfile b/2.10.x/alpine3.19/Dockerfile
@@ -28,10 +28,6 @@ RUN set -eux; \
 COPY nats-server.conf /etc/nats/nats-server.conf
 COPY docker-entrypoint.sh /usr/local/bin
 
-RUN apk add --no-cache libcap \
- && setcap cap_net_bind_service=+ep /usr/local/bin/nats-server \
- && apk del libcap
-
 EXPOSE 4222 8222 6222
 ENTRYPOINT ["docker-entrypoint.sh"]
 CMD ["nats-server", "--config", "/etc/nats/nats-server.conf"]
diff --git a/2.11.x/alpine3.19/Dockerfile b/2.11.x/alpine3.19/Dockerfile
@@ -28,10 +28,6 @@ RUN set -eux; \
 COPY nats-server.conf /etc/nats/nats-server.conf
 COPY docker-entrypoint.sh /usr/local/bin
 
-RUN apk add --no-cache libcap \
- && setcap cap_net_bind_service=+ep /usr/local/bin/nats-server \
- && apk del libcap
-
 EXPOSE 4222 8222 6222
 ENTRYPOINT ["docker-entrypoint.sh"]
 CMD ["nats-server", "--config", "/etc/nats/nats-server.conf"]
diff --git a/2.9.x/alpine3.18/Dockerfile b/2.9.x/alpine3.18/Dockerfile
@@ -27,10 +27,6 @@ RUN set -eux; \
 COPY nats-server.conf /etc/nats/nats-server.conf
 COPY docker-entrypoint.sh /usr/local/bin
 
-RUN apk add --no-cache libcap \
- && setcap cap_net_bind_service=+ep /usr/local/bin/nats-server \
- && apk del libcap
-
 EXPOSE 4222 8222 6222
 ENTRYPOINT ["docker-entrypoint.sh"]
 CMD ["nats-server", "--config", "/etc/nats/nats-server.conf"]