units: skip mounting /dev/hugepages if we don't have CAP_SYS_ADMIN

Preparation for allowing systemd to run gracefully in containers lacking
CAP_SYS_ADMIN.

diff --git a/units/dev-hugepages.mount b/units/dev-hugepages.mount
index d711faed5568b16f503edcdbec3649f7b0082c43..882adb4545ae5b1bcd7bc7fe5bd3bab286d141f1 100644 (file)
--- a/units/dev-hugepages.mount
+++ b/units/dev-hugepages.mount
@@ -12,6 +12,7 @@ Documentation=http://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
 DefaultDependencies=no
 Before=sysinit.target
 ConditionPathExists=/sys/kernel/mm/hugepages
+ConditionCapability=CAP_SYS_ADMIN
 
 [Mount]
 What=hugetlbfs