Page MenuHomeVyOS Platform

Container option to add Linux capabilities
Closed, ResolvedPublicFEATURE REQUEST


There are some containers that need some additional kernel capabilities which would normally be added via the --cap-add runtime option.

My proposal is to have a configuration option that looks like this:

set container name XYZ cap-add NET_ADMIN

The value of cap-add would be a list allowing more than one cap to be added.


Difficulty level
Unknown (require assessment)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible

Event Timeline

Can you send more examples how it looks like in podman cli?
Which parameters do you set, and how to check if it is successfully applied?

Viacheslav changed the task status from Open to In progress.Oct 15 2021, 4:05 PM
Viacheslav claimed this task.


set container name foo allow-host-networks
set container name foo cap-add 'net-admin'
set container name foo cap-add 'sys-time'
set container name foo image 'busybox'

@artooro Will be available in the next rolling release
Let us know, if you want some other capabilities

@Viacheslav this is great. I hope to get around to testing it this week.