fix(deploy): Set CAP_NET_BIND_SERVICE capability on cosmos binary

automagik-genie · claude · automagik-genie · commit 99ebcd7a48da · 2025-12-03T00:45:49.000Z
The cosmos binary needs this capability to bind to privileged ports (80, 443) when running as non-root user. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
diff --git a/scripts/deploy/deploy.sh b/scripts/deploy/deploy.sh
@@ -42,6 +42,9 @@ tar -xzf /tmp/cosmos.tar.gz -C "${INSTALL_DIR}/bin/"
 # Ensure correct permissions
 chmod +x "${INSTALL_DIR}/bin/cosmos" "${INSTALL_DIR}/bin/cosmos-launcher" || true
 
+# Allow cosmos binary to bind to privileged ports (80, 443) as non-root user
+setcap 'cap_net_bind_service=+ep' "${INSTALL_DIR}/bin/cosmos"
+
 # Update meta.json with deployment info
 cat > "${INSTALL_DIR}/meta.json" << EOF
 {

Original file line number	Diff line number	Diff line change
`@@ -42,6 +42,9 @@ tar -xzf /tmp/cosmos.tar.gz -C "${INSTALL_DIR}/bin/"`
`42`	`42`	`# Ensure correct permissions`
`43`	`43`	`chmod +x "${INSTALL_DIR}/bin/cosmos" "${INSTALL_DIR}/bin/cosmos-launcher" \|\| true`
`44`	`44`
	`45`	`+# Allow cosmos binary to bind to privileged ports (80, 443) as non-root user`
	`46`	`+setcap 'cap_net_bind_service=+ep' "${INSTALL_DIR}/bin/cosmos"`
	`47`	`+`
`45`	`48`	`# Update meta.json with deployment info`
`46`	`49`	`cat > "${INSTALL_DIR}/meta.json" << EOF`
`47`	`50`	`{`