Enable secure sudo access for ... Note
GitLab

Enable secure sudo access for GitLab Remote Development workspaces

GitLab has introduced a secure way to run sudo commands in workspaces, which can be configured using Sysbox, Kata Containers, or User namespaces. This feature allows users to install and configure dependencies securely during runtime. To set up a workspace with secure sudo access, you need to configure the GitLab agent for workspaces with specific settings depending on the chosen option. For Sysbox, you need to install it in the Kubernetes cluster and set the agent config with allow_privilege_escalation: true. For Kata Containers, you also need to install it in the Kubernetes cluster and configure the agent with allow_privilege_escalation: true. For User namespaces, you need to configure user namespaces in the Kubernetes cluster and set use_kubernetes_user_namespaces: true in the agent config. Once the workspace is set up, you can install dependencies securely using sudo commands. You can then analyze logs using tools like jq to inspect specific entries.