Possibly a dumb question from a incus novice, but the latest pihole image requires CAP_SYS_TIME or throws an error re:
WARNING: Insufficient permissions to set system time (CAP_SYS_TIME required), NTP client not available
Is there a fix when using pihole as an oci app container?
Welcome!
The container image tries to set the time of the host from WITHIN the container. This is a big no-no because it is sane for the time to be set only by the host. The container should accept the time that is provided by the host and on the host you would enable the appropriate time service (like NTP) so that you have good time (pun intended).
Therefore, the workaround is to get the container not to try to update the time. This can be achieved with the following line.
sudo pihole-FTL --config ntp.sync.interval 0
Verify that your container has the correct timezone for you.
Many thanks @simos. Executed command within app container shell and no-more error messages. Strange that latest pihole should try to do this knowing that it’s widely used in containers.
PS I’ve been catching up on your various blog entries. All very valuable for incus beginners and for those who had not previously used LXD/LXC.