[lxc-users] creating bridges inside a (macvlan) container

[Chris Burroughs]

I have containers setup with macvlan [1] networking.  This generally 
works well, but it would be nice in a few edge cases to be able to 
create an additional veth bridge from inside the container.  However, 
this does not work:

#  brctl addbr bridge0
add bridge failed: Operation not permitted

I believe the specific errno is ENOTSUPP  524.  I've tried granting 
extra capabilities (including SYS_ADMIN) without success.  It it 
possible to create veth bridges inside a container on top of macvlan 
bridges?


[1]
lxc.network.type = macvlan
lxc.network.macvlan.mode = bridge
lxc.network.flags = up
lxc.network.link = br0
lxc.network.name = eth0
lxc.network.hwaddr = 06:00:b2:80:7d:ab