`processes.server.linux.capabilities` don't work

[RafaelKr]

Describe the bug

The linux capabilities described at https://devenv.sh/guides/migrating-to-2.0/#elevated-processes don't work as expected:

{
  processes.server.linux.capabilities = [ "net_bind_service" ];
}

To reproduce

• Run devenv init
• Use the devenv.nix from https://gist.github.com/RafaelKr/13bcc4e7cd68c20f879e34845139936a

I tried net_bind_service (like in the migration guide) and cap_net_bind_service, also I tried cap_net_admin which I found at https://devenv.sh/reference/options/#processesnamelinuxcapabilities - all with the same result:
Error: loading initial config: loading new config: http app module: start: listening on :443: listen tcp :443: bind: permission denied

Changing the configured URL to http://test.localhost:8000/ works correctly.

Version

devenv 2.0.2+7d32628 (x86_64-linux)

[domenkozar]

Yeah, I have WIP branch that fixes this. I'll prepare it in the following days.

[RafaelKr]

Is it possible to test it? Or is there a quick workaround?

[RafaelKr]

FYI: I just remembered currently I also need to use the sudo-task branch to have it working for process-compose: 13aaa1c
Branch sudo-task-v2 is not working as expected, it says it's running caddy, but I don't see its output.

The only annoying thing for sudo-task branch is, that it asks for the sudo password twice.
This is the working setup for me: https://gist.github.com/RafaelKr/47c4e99963fdc10bcf10bf07c7d7cfd2

[RafaelKr]

Hey @domenkozar, are there any hard blockers that currently prevent fixing this? Or is it just that other issues need to have higher priority?

[domenkozar]

This is also blocking cachix/cloud.devenv.sh#4

There's no blockers, besides it's hard to fix.