aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/pkg/exec.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2026-01-27 21:07:18 +0900
committerOphestra <cat@gensokyo.uk>2026-01-27 21:07:18 +0900
commit41f9aebbb7f93616637d717eef2371e2408b68ca (patch)
treec57f7432d810e058cb8b0954279811513d72f281 /internal/pkg/exec.go
parenta2a0e36802131397ce9be36a3c11034e399931b0 (diff)
internal/pkg: allow multiarch
The armv8l busybox binary release needs this to run correctly. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/pkg/exec.go')
-rw-r--r--internal/pkg/exec.go2
1 files changed, 2 insertions, 0 deletions
diff --git a/internal/pkg/exec.go b/internal/pkg/exec.go
index 0c43cff0..f5270801 100644
--- a/internal/pkg/exec.go
+++ b/internal/pkg/exec.go
@@ -18,6 +18,7 @@ import (
"hakurei.app/container"
"hakurei.app/container/check"
"hakurei.app/container/fhs"
+ "hakurei.app/container/seccomp"
"hakurei.app/container/std"
"hakurei.app/message"
)
@@ -302,6 +303,7 @@ func (a *execArtifact) cure(f *FContext, hostNet bool) (err error) {
z := container.New(ctx, f.GetMessage())
z.WaitDelay = execWaitDelay
z.SeccompPresets |= std.PresetStrict & ^std.PresetDenyNS
+ z.SeccompFlags |= seccomp.AllowMultiarch
z.ParentPerm = 0700
z.HostNet = hostNet
z.Hostname = "cure"