Skip to content

Conversation

@4ndv
Copy link
Contributor

@4ndv 4ndv commented Jan 6, 2026

There is already support for running containers in privileged mode, but no support for only giving/removing specific capabilities

Tested with my local cluster:

  • Deploying an app without capabilities
  • Redeploying the same app with added capabilities to check if container is recreated correctly
lynx@uncloud:~$ sudo docker inspect d4be13fe21cb | grep CapAdd -A 3
            "CapAdd": [
                "CAP_NET_ADMIN",
                "CAP_SYS_MODULE"
            ],

Copy link
Owner

@psviderski psviderski left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thanks! ❤️

@psviderski psviderski merged commit 6c2f85d into psviderski:main Jan 10, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants