From 020982527707c7eb0d5ac8d39ff8bd098da25f97 Mon Sep 17 00:00:00 2001
From: fastlorenzo <git@bernardi.be>
Date: Wed, 7 Dec 2022 11:42:04 +0100
Subject: [PATCH] Add net_bind_service capability for python executable

Signed-off-by: fastlorenzo <git@bernardi.be>
---
 core/base/Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/core/base/Dockerfile b/core/base/Dockerfile
index 65e8be94..9f0b204f 100644
--- a/core/base/Dockerfile
+++ b/core/base/Dockerfile
@@ -80,7 +80,8 @@ FROM system
 
 COPY --from=build /app/venv/ /app/venv/
 COPY --chown=root:root --from=build /app/snuffleupagus.so /usr/lib/php81/modules/
-RUN setcap 'cap_net_bind_service=+ep' /app/venv/bin/gunicorn
+RUN setcap 'cap_net_bind_service=+ep' /app/venv/bin/gunicorn \
+  ; setcap 'cap_net_bind_service=+ep' /usr/bin/python3.10
 
 ENV VIRTUAL_ENV=/app/venv
 ENV PATH="${VIRTUAL_ENV}/bin:${PATH}"