From 718eaabefae5a61c99319c099ff3b28e236f135a Mon Sep 17 00:00:00 2001
From: Kristian Klausen <kristian@klausen.dk>
Date: Tue, 26 Jul 2022 21:06:25 +0200
Subject: [PATCH] gitlab_runner: Prevent the VMs from doing MAC, IP and ARP
spoofing
---
roles/gitlab_runner/files/domain_template.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/roles/gitlab_runner/files/domain_template.xml b/roles/gitlab_runner/files/domain_template.xml
index eab3b188c..7c359a10c 100644
--- a/roles/gitlab_runner/files/domain_template.xml
+++ b/roles/gitlab_runner/files/domain_template.xml
@@ -28,6 +28,7 @@
<interface type='network'>
<source network='default'/>
<model type='virtio'/>
+ <filterref filter='clean-traffic'/>
</interface>
<rng model='virtio'>
<backend model='random'>/dev/urandom</backend>
--
GitLab