Claude f965547b6c fix: Add nested container support to workspace.nspawn ...

- Add Capability=all for full capabilities
- Add SystemCallFilter=@keyring bpf for required syscalls
- Set PrivateUsers=no to avoid user namespace issues
- Set SuppressSync=false for Docker compatibility
- Fixes audit errors in nested systemd-nspawn containers

2025-11-07 19:54:07 +00:00

3.1 KiB

Executable File

Raw Blame History

View Raw