Alexey Milovidov 853963c742 Remove no-new-privileges from example UDF driver ...

The source-tree `c_function_body` example driver used Docker with
`--security-opt=no-new-privileges`, but this option prevents containers from
executing on some developer hosts. Keep Docker for the example, but drop that
option from both the build container and the generated runtime command.

Run the Docker containers as the server OS user so they can read and write the
server-created per-function work directory without changing directory
permissions.

Tests:
`python3 -m py_compile programs/server/user_defined_executable_function_drivers/c_function_body_driver.py`
`git diff --check`
`CLICKHOUSE_BINARY=./build/programs/clickhouse tests/queries/0_stateless/04241_executable_udf_driver.sh`
`CLICKHOUSE_BINARY=./build/programs/clickhouse tests/queries/0_stateless/04242_executable_udf_driver_errors.sh`
`clickhouse-server` default-config smoke with Docker-backed `c_function_body`

Refs: https://github.com/ClickHouse/ClickHouse/pull/105131

2026-05-16 21:35:30 +02:00

..

c_function_body_create.sh

…

c_function_body_driver.py

Remove no-new-privileges from example UDF driver

2026-05-16 21:35:30 +02:00

c_function_body_drop.sh

…