{"action":"closed","issue":{"url":"https://api.github.com/repos/ansible/ansible/issues/43293","repository_url":"https://api.github.com/repos/ansible/ansible","labels_url":"https://api.github.com/repos/ansible/ansible/issues/43293/labels{/name}","comments_url":"https://api.github.com/repos/ansible/ansible/issues/43293/comments","events_url":"https://api.github.com/repos/ansible/ansible/issues/43293/events","html_url":"https://github.com/ansible/ansible/issues/43293","id":344699869,"node_id":"MDU6SXNzdWUzNDQ2OTk4Njk=","number":43293,"title":"Cannot restrict kernel capabilities in the docker_container module","user":{"login":"archmangler","id":3898404,"node_id":"MDQ6VXNlcjM4OTg0MDQ=","avatar_url":"https://avatars3.githubusercontent.com/u/3898404?v=4","gravatar_id":"","url":"https://api.github.com/users/archmangler","html_url":"https://github.com/archmangler","followers_url":"https://api.github.com/users/archmangler/followers","following_url":"https://api.github.com/users/archmangler/following{/other_user}","gists_url":"https://api.github.com/users/archmangler/gists{/gist_id}","starred_url":"https://api.github.com/users/archmangler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/archmangler/subscriptions","organizations_url":"https://api.github.com/users/archmangler/orgs","repos_url":"https://api.github.com/users/archmangler/repos","events_url":"https://api.github.com/users/archmangler/events{/privacy}","received_events_url":"https://api.github.com/users/archmangler/received_events","type":"User","site_admin":false},"labels":[{"id":686214011,"node_id":"MDU6TGFiZWw2ODYyMTQwMTE=","url":"https://api.github.com/repos/ansible/ansible/labels/affects_2.5","name":"affects_2.5","color":"ededed","default":false},{"id":785271699,"node_id":"MDU6TGFiZWw3ODUyNzE2OTk=","url":"https://api.github.com/repos/ansible/ansible/labels/bug","name":"bug","color":"fbca04","default":true},{"id":61528803,"node_id":"MDU6TGFiZWw2MTUyODgwMw==","url":"https://api.github.com/repos/ansible/ansible/labels/cloud","name":"cloud","color":"c7def8","default":false},{"id":500715204,"node_id":"MDU6TGFiZWw1MDA3MTUyMDQ=","url":"https://api.github.com/repos/ansible/ansible/labels/docker","name":"docker","color":"c5def5","default":false},{"id":496359346,"node_id":"MDU6TGFiZWw0OTYzNTkzNDY=","url":"https://api.github.com/repos/ansible/ansible/labels/module","name":"module","color":"1d76db","default":false},{"id":636327968,"node_id":"MDU6TGFiZWw2MzYzMjc5Njg=","url":"https://api.github.com/repos/ansible/ansible/labels/support:community","name":"support:community","color":"ededed","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-07-26T05:27:13Z","updated_at":"2018-08-26T12:33:32Z","closed_at":"2018-08-26T12:33:32Z","author_association":"NONE","body":"<!---\r\nVerify first that your issue/request is not already reported on GitHub.\r\nTHIS FORM WILL BE READ BY A MACHINE, COMPLETE ALL SECTIONS AS DESCRIBED.\r\nAlso test if the latest release, and devel branch are affected too.\r\nALWAYS add information AFTER (OUTSIDE) these html comments.\r\nOtherwise it may end up being automatically closed by our bot. -->\r\n\r\n##### SUMMARY\r\n\r\nCannot restrict kernel capabilities in the docker_container module using the \"capabilities\" parameter.\r\n\r\n##### ISSUE TYPE\r\n - Bug Report\r\n\r\n##### COMPONENT NAME\r\n\r\ndocker_container\r\n\r\n##### ANSIBLE VERSION\r\n<!--- Paste, BELOW THIS COMMENT, verbatim output from \"ansible --version\" between quotes below -->\r\n```\r\nansible 2.5.2, ansible 2.4.0,ansible 2.4.1, ansible 2.4.2\r\n```\r\n\r\n##### CONFIGURATION\r\n<!--- If using Ansible 2.4 or above, paste, BELOW THIS COMMENT, the results of \"ansible-config dump --only-changed\"\r\nOtherwise, mention any settings you have changed/added/removed in ansible.cfg\r\n(or using the ANSIBLE_* environment variables).-->\r\n\r\n##### OS / ENVIRONMENT\r\n<!--- Mention, BELOW THIS COMMENT, the OS you are running Ansible from, and the OS you are\r\nmanaging, or say \"N/A\" for anything that is not platform-specific.\r\nAlso mention the specific version of what you are trying to control,\r\ne.g. if this is a network bug the version of firmware on the network device.-->\r\n\r\n##### STEPS TO REPRODUCE\r\n<!--- For bugs, show exactly how to reproduce the problem, using a minimal test-case.\r\nFor new features, show how the feature would be used. -->\r\n\r\n<!--- Paste example playbooks or commands between quotes below -->\r\n```yaml\r\n- name: Create a ubuntu container\r\n  docker_container:\r\n    name: ubuntu\r\n    image: ubuntu:16:04\r\n    memory: 512m\r\n    published_ports: 22:22\r\n    capabilities:\r\n      - CHOWN\r\n    security_opts:\r\n      - no-new-privileges\r\n```\r\n\r\n<!--- You can also paste gist.github.com links for larger files -->\r\n\r\n##### EXPECTED RESULTS\r\n<!--- What did you expect to happen when running the steps above? -->\r\nSome means of specifying caps removed from the container \r\n##### ACTUAL RESULTS\r\n<!--- What actually happened? If possible run with extra verbosity (-vvvv) -->\r\nNo means of specifying caps removed from the container \r\n<!--- Paste verbatim command output between quotes below -->\r\n```\r\nN/A\r\n```"}}
{"actor":{"display_login":"ansibot"}}