diff --git a/jibri/Dockerfile b/jibri/Dockerfile index 2e90d2271c..4bab2aed16 100644 --- a/jibri/Dockerfile +++ b/jibri/Dockerfile @@ -16,7 +16,20 @@ ARG CHROME_RELEASE=121.0.6167.85 COPY rootfs/ / RUN apt-dpkg-wrap apt-get update && \ - apt-dpkg-wrap apt-get install -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" jibri libgl1-mesa-dri procps jitsi-upload-integrations jitsi-autoscaler-sidecar jq pulseaudio dbus dbus-x11 rtkit unzip fonts-noto && \ + apt-dpkg-wrap apt-get install -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" \ + jibri \ + libgl1-mesa-dri \ + procps \ + jitsi-upload-integrations \ + jitsi-autoscaler-sidecar \ + jq \ + pulseaudio \ + dbus \ + dbus-x11 \ + rtkit \ + unzip \ + fonts-noto \ + libcap2-bin && \ /usr/bin/install-chrome.sh && \ apt-cleanup && \ adduser jibri rtkit && \ diff --git a/jibri/rootfs/etc/cont-init.d/10-config b/jibri/rootfs/etc/cont-init.d/10-config index 7f9a0ceb87..d1ea95cba2 100644 --- a/jibri/rootfs/etc/cont-init.d/10-config +++ b/jibri/rootfs/etc/cont-init.d/10-config @@ -1,5 +1,11 @@ #!/usr/bin/with-contenv bash +# Check if the SYS_ADMIN cap is set +if ! capsh --has-p=cap_sys_admin; then + echo "Required capability SYS_ADMIN is missing" + exit 1 +fi + # Check if /dev/shm is large enough (2GB at least) if ! shm-check; then echo "/dev/shm must be at least 2GB in size"