From 89ec9700b554513031791f603b9ac85cca4748ba Mon Sep 17 00:00:00 2001 From: Colin Hutchinson Date: Fri, 21 Dec 2018 23:04:32 +0000 Subject: [PATCH] fix(setcap) only setcap if KONG_STREAM_LISTEN env is set --- alpine/docker-entrypoint.sh | 4 +++- centos/docker-entrypoint.sh | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/alpine/docker-entrypoint.sh b/alpine/docker-entrypoint.sh index 0b6f7521..b30d540a 100755 --- a/alpine/docker-entrypoint.sh +++ b/alpine/docker-entrypoint.sh @@ -10,7 +10,9 @@ if [[ "$1" == "kong" ]]; then chown kong "$PREFIX" su-exec kong kong prepare -p "$PREFIX" - setcap cap_net_raw=+ep /usr/local/openresty/nginx/sbin/nginx + if [ ! -z ${KONG_STREAM_LISTEN+x} ]; then + setcap cap_net_raw=+ep /usr/local/openresty/nginx/sbin/nginx + fi chmod 777 /proc/self/fd/1 chmod 777 /proc/self/fd/2 diff --git a/centos/docker-entrypoint.sh b/centos/docker-entrypoint.sh index 113649df..816bfb13 100755 --- a/centos/docker-entrypoint.sh +++ b/centos/docker-entrypoint.sh @@ -10,7 +10,9 @@ if [[ "$1" == "kong" ]]; then chown kong "$PREFIX" su kong -c "kong prepare -p '$PREFIX'" - setcap cap_net_raw=+ep /usr/local/openresty/nginx/sbin/nginx + if [ ! -z ${KONG_STREAM_LISTEN+x} ]; then + setcap cap_net_raw=+ep /usr/local/openresty/nginx/sbin/nginx + fi chmod 777 /proc/self/fd/1 chmod 777 /proc/self/fd/2