Accepting request 1044065 from home:vulyanov:branches:Virtualization

- Allow qemu/slirp to bind sockets to privileged ports
- Install ncat, curl, ethtool and gawk (required for network tests)

OBS-URL: https://build.opensuse.org/request/show/1044065
OBS-URL: https://build.opensuse.org/package/show/Virtualization/virt-launcher-container?expand=0&rev=33

Dockerfile

@@ -28,12 +28,16 @@ LABEL org.opensuse.reference="%%REGISTRY%%/%%TAGPREFIX%%/virt-launcher:%%PKG_VER
 RUN zypper -n install \
               augeas \
               augeas-lenses \
+              curl \
+              ethtool \
+              gawk \
               iptables \
               kubevirt-container-disk \
               kubevirt-virt-launcher \
               libcap-progs \
               libvirt-client \
               libvirt-daemon-driver-qemu \
+              ncat \
               nftables \
               qemu-hw-usb-redirect \
               qemu-tools \
@@ -57,6 +61,8 @@ RUN if [ "$TARGETARCH" = "arm64" ]; then \
 
 RUN zypper clean -a
 
+RUN ln -s ncat /usr/bin/nc
+
 RUN mkdir -p /usr/share/OVMF
 
 #!ArchExclusiveLine: x86_64
@@ -86,6 +92,7 @@ RUN cd /var && rm -rf run && ln -s ../run .
 # Setup permissions and capabilities for non-root VMIs. KubeVirt sets
 # XDG_* directories to /var/run.
 RUN setcap 'cap_net_bind_service,cap_sys_ptrace=+ep' /usr/bin/virt-launcher && \
+    setcap 'cap_net_bind_service=+ep' /usr/bin/qemu-system-$(uname -m) && \
     chmod 0755 /etc/libvirt && \
     chown qemu:qemu /var/run
 

virt-launcher-container.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Dec 21 08:26:09 UTC 2022 - Vasily Ulyanov <vasily.ulyanov@suse.com>
+
+- Allow qemu/slirp to bind sockets to privileged ports
+- Install ncat, curl, ethtool and gawk (required for network tests)
+
 -------------------------------------------------------------------
 Mon Oct 10 13:49:10 UTC 2022 - Vasily Ulyanov <vasily.ulyanov@suse.com>