chore 📦: Update setupacdc.yml to include lxc capability

Added a new LXC capability to the setupacdc.yml file, enabling sys_time keep for improved security
2025-11-07 18:06:10 +01:00
parent f6b28b5d0c
commit 5ed3c8fdac
1 changed files with 1 additions and 0 deletions
--- a/tasks/setupacdc.yml
+++ b/tasks/setupacdc.yml
@@ -90,6 +90,7 @@
          -protection {{ container_protection }} \
          -unprivileged {{ container_unprivileged }} \
          -tags '{{ container_tags | join(',') }}' \
+          -lxc "lxc.cap.keep=sys_time" \
          -features '{{ container_features }}'
      args:
        creates: '/etc/pve/lxc/{{ container_id }}.conf'