Unable to set ulimit & capabilities inside a single user pod

JupyterHub Zero to JupyterHub on Kubernetes
1

Hi

I’m unable to set the below config inside a single user pod

ulimit -c unlimited 
ulimit: core file size: cannot modify limit: Operation not permitted
SecurityContext:
    capabilities:
        add: ["SYS_ADMIN", "SYS_RESOURCE"]

I’m using jupyter/datascience-notebook image. I’m running the container with uid: 0

2

Can you try running it as privileged? If that works we can start reducing the capabilities. If it doesn’t we know there’s some other problem.

3

I’m running this under singleuser pod.

  extraPodConfig:
    securityContext:
      runAsUser: 0
      privileged: true
      allowPrivilegeEscalation: true
      capabilities:
        add: ["SYS_ADMIN", "SYS_RESOURCE"]

But it doesn’t seem to have any effect.