3.0.1 - adding network namespace in unpriviliged container?

LXC
1

trying to add network namespace in unpriviliged container with ip netns add but always being presented with

mount --make-shared /var/run/netns failed: Permission denied

Can this somehow be achieved?

1 Like
2

Try enabling security.nesting=true for the container, that should relax mounts enough to allow this.

3

Unfortunately nope, showing the same output. :frowning: