Re: How to run strace within cf droplet
Giuseppe Capizzi
Hi!
unprivileged containers, and every container created through `cf push`
is unprivileged by default.
cf-deployment opsfile [1] for details.
[1] https://github.com/cloudfoundry/cf-deployment/blob/master/operations/enable-privileged-container-support.yml
Hope it helps!
--
Giuseppe Capizzi
So, I have a strange problem going on in my CF container. I can "cf ssh appname" into it and reproduce it with command line. I was hoping to run strace on it, but when I run it I getThis is expected, as we drop the `CAP_SYS_PTRACE` capability for our
"PTRACE_TRACEME doesn't work: Operation not permitted"
unprivileged containers, and every container created through `cf push`
is unprivileged by default.
This is a dev instance, I don't mind if I break things. Is there a way to enable PTRACE_TRACEME so I can run strace?You *could* enable privileged containers, see the dedicated
cf-deployment opsfile [1] for details.
[1] https://github.com/cloudfoundry/cf-deployment/blob/master/operations/enable-privileged-container-support.yml
Hope it helps!
--
Giuseppe Capizzi