From: Tom Hughes <tom@compton.nu>
Date: Sat, 3 Dec 2022 11:42:40 +0000 (+0000)
Subject: Allow CAP_SYS_RAWIO for the smart collector
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/5e3578ef0d86feac33ccf96a0afe267c8115bf72

Allow CAP_SYS_RAWIO for the smart collector
---

diff --git a/cookbooks/hardware/recipes/default.rb b/cookbooks/hardware/recipes/default.rb
index 6095cceeb..3d1d8aa19 100644
--- a/cookbooks/hardware/recipes/default.rb
+++ b/cookbooks/hardware/recipes/default.rb
@@ -536,7 +536,7 @@ if disks.count.positive?
   prometheus_collector "smart" do
     interval "15m"
     user "root"
-    capability_bounding_set "CAP_SYS_ADMIN"
+    capability_bounding_set %w[CAP_SYS_ADMIN CAP_SYS_RAWIO]
     private_devices false
     private_users false
     protect_clock false