Thank you for detailed answer and interesting links! Could you please explain/point me to some information/source, why docker can't use -net=host namespace if

Thank you for detailed answer and interesting links! Could you please explain/point me to some information/source, why docker can't use -net=host namespace if userns is enabled, while on the other hand rootlesskit[1] which uses userns by default, dont have problem with using host netns (--net=host) ? [1] https://github.com/rootless-containers/rootlesskit https://github.com/rootless-containers/rootlesskit