Centos 7.5 container operation not permitted?

[johnmaher]

I may have figured out a work around. Using info about privileged containers from this post:

Do priviledged containers have a different view on the filesystem + general container security?

Using system containers most of the root filesystem should be similar. But what about /proc and /sys or maybe other ones? Would there be differences between e.g. /proc in an priviledged and /proc in an unpriviledged container? Can you determine from inside the container if it is running priviledged or not? From what I read you would at least need root for that and you could indirectly check if e.g. mount fails or loading kernel modules. What other operations would not be possible in an unprivile…

it appears that I can make the container privileged:

lxc config set [container] security.privileged true

and then complete the installation that requires the ability to add entropy to the kernel pool. I’m assuming it would be wise to remove the privileged status after the install is complete, so I’ll do that and continue to experiment.

If anyone can comment on whether this action is unwise, I would appreciate hear it.