dank/serverAppConfigs
1
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

SearXNG quadlet: use AddCapability= (the generator rejects CapAdd=)

Browse Source 
The podman quadlet generator fails with "unsupported key 'CapAdd' in group
'Container'" and skips the whole unit. The correct key is AddCapability=
(maps to podman --cap-add). Update the gluetun unit and its test seam.
This commit is contained in:
Frank
2026-08-18 23:57:25 -07:00
parent d7c66b0253
commit e036296fd1
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dankclaw/searxng/quadlet/gluetun.container
+1 -1
View File
@@ -17,7 +17,7 @@ After=searxng-network.service network.target
ContainerName=gluetun ContainerName=gluetun
Network=searxng.network Network=searxng.network
Image=docker.io/qmcgaw/gluetun:latest Image=docker.io/qmcgaw/gluetun:latest
CapAdd=NET_ADMIN AddCapability=NET_ADMIN
Device=/dev/net/tun:/dev/net/tun Device=/dev/net/tun:/dev/net/tun
Environment=VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER} Environment=VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
Environment=VPN_TYPE=${VPN_TYPE} Environment=VPN_TYPE=${VPN_TYPE}
tests/searxng_quadlet.bats
+2 -2
View File
@@ -37,8 +37,8 @@ QDIR="$REPO_ROOT/dankclaw/searxng/quadlet"
} }
@test "gluetun has NET_ADMIN and the /dev/net/tun device" { @test "gluetun has NET_ADMIN and the /dev/net/tun device" {
grep -qE '^CapAdd=NET_ADMIN' "$QDIR/gluetun.container" \ grep -qE '^AddCapability=NET_ADMIN' "$QDIR/gluetun.container" \
|| { echo "gluetun.container must set CapAdd=NET_ADMIN"; return 1; } || { echo "gluetun.container must set AddCapability=NET_ADMIN"; return 1; }
grep -qE '^Device=/dev/net/tun' "$QDIR/gluetun.container" \ grep -qE '^Device=/dev/net/tun' "$QDIR/gluetun.container" \
|| { echo "gluetun.container must set Device=/dev/net/tun"; return 1; } || { echo "gluetun.container must set Device=/dev/net/tun"; return 1; }
} }