[lxc-users] Unprivileged container and lxc.network.script.up

Serge Hallyn serge.hallyn at ubuntu.com
Mon Aug 31 13:39:01 UTC 2015


Quoting Benoit GEORGELIN - Association Web4all (benoit.georgelin at web4all.fr):
> Hi, 
> 
> I would like to know if there is an alternative option of lxc.network.script.up with an unprivileged containter. 

No.  You'll need to start the container as root to do that - else you're
allowing an unprivileged user to specify a script to run as root in the
initial network namespace.

-serge


More information about the lxc-users mailing list