From 32fa3dbc99c2600fb4571e1dc11985d81e34d6c8 Mon Sep 17 00:00:00 2001
From: Mikhail Filimonov <mfilimonov@altinity.com>
Date: Tue, 23 Feb 2021 11:18:24 +0100
Subject: [PATCH] Integration tests: add IPC_LOCK and SYS_NICE caps

It is needed to make integration tests work with a installed binary (/usr/bin/clickhouse) mounted in.
Otherwise the binary mounted in have the capability, while the container is not allowing that
and you get cryptic message:
standard_init_linux.go:211: exec user process caused "operation not permitted"
---
 tests/integration/helpers/cluster.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/integration/helpers/cluster.py b/tests/integration/helpers/cluster.py
index 16ceb823f2e..0fa6f80e6ba 100644
--- a/tests/integration/helpers/cluster.py
+++ b/tests/integration/helpers/cluster.py
@@ -868,6 +868,8 @@ services:
         cap_add:
             - SYS_PTRACE
             - NET_ADMIN
+            - IPC_LOCK
+            - SYS_NICE
         depends_on: {depends_on}
         user: '{user}'
         env_file: