fix: bpf program failes due of linux LSM Lockdown

Commonly used Kubernetes CNI using multiple feature are blocked by this parameter Signed-off-by: Kevin Klopfenstein <[email protected]>
siderolabs · Apr 2, 2024 · 74f554b · 74f554b
1 parent 3195e5d
commit 74f554b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/machinery/kernel/kernel.go b/pkg/machinery/kernel/kernel.go
@@ -35,7 +35,7 @@ var DefaultArgs = []string{
 
 // SecureBootArgs returns the kernel commandline options required for secure boot.
 var SecureBootArgs = []string{
- "lockdown=confidentiality",
+ "lockdown=integrity",
 }
 
 // Param represents a kernel system property.