Presumably Docker's seccomp profile [1] blocks the init_module system call which is used by insmod [2]. Although, looking at the default profile, it seems to ex

Presumably Docker's seccomp profile [1] blocks the init_module system call which is used by insmod [2]. Although, looking at the default profile, it seems to explicitly allow it - but maybe only if you have CAP_SYS_MODULE, which I think means running Docker with "--cap-add=SYS_MODULE". [1] https://docs.docker.com/engine/security/seccomp/ https://docs.docker.com/engine/security/seccomp/ [2] https://tldp.org/HOWTO/Module-HOWTO/x627.html https://tldp.org/HOWTO/Module-HOWTO/x627.html