There are some containers that need some additional kernel capabilities which would normally be added via the --cap-add runtime option.
My proposal is to have a configuration option that looks like this:
set container name XYZ cap-add NET_ADMIN
The value of cap-add would be a list allowing more than one cap to be added.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | FEATURE REQUEST | Viacheslav | T3676 Container option to add Linux capabilities | ||
| Resolved | FEATURE REQUEST | Viacheslav | T3916 Add additional Linux capabilities to container configuration | ||
| Invalid | FEATURE REQUEST | None | T3997 Add CAP_NET_RAW capability |
Can you send more examples how it looks like in podman cli?
Which parameters do you set, and how to check if it is successfully applied?
PR https://github.com/vyos/vyos-1x/pull/1027
set container name foo allow-host-networks set container name foo cap-add 'net-admin' set container name foo cap-add 'sys-time' set container name foo image 'busybox'
@artooro Will be available in the next rolling release
Let us know, if you want some other capabilities