2 ms·
Containers implement something not unlike SELinux policies. Networking stuff requires the NET_ADMIN permission, which is not set by default.
by api 12y ago
Containers implement something not unlike SELinux policies. Networking stuff requires the NET_ADMIN permission, which is not set by default.
- wmf 12y agoSetting up networking requires root but so does creating the container so I don't see what the problem is. Using networking doesn't require any special permissions.