lee/container
1
0
Fork 0
mirror of https://github.com/apple/container.git synced 2026-09-23 16:15:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add capabilities support (#1383)

Browse Source 
Closes #1352

Containerization has had support for a bit, it was just never brought
over here. It's exposed on the CLI via the classic `--cap-add` and
`--cap-drop` UX.
This commit is contained in:
Danny Canter
2026-04-07 17:09:56 -07:00
committed by GitHub
parent e37dcc19a5
commit a557ce80a5
11 changed files with 733 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/command-reference.md
+4
View File
@@ -43,6 +43,8 @@ container run [<options>] <image> [<arguments> ...]
**Management Options**
* `-a, --arch <arch>`: Set arch if image can target multiple architectures (default: arm64)
* `--cap-add <cap>`: Add a Linux capability (e.g. `CAP_NET_RAW`, `NET_RAW`, or `ALL`)
* `--cap-drop <cap>`: Drop a Linux capability (e.g. `CAP_NET_RAW`, `NET_RAW`, or `ALL`)
* `--cidfile <cidfile>`: Write the container ID to the path provided
* `-d, --detach`: Run the container and detach from the process
* `--dns <ip>`: DNS nameserver IP address
@@ -204,6 +206,8 @@ container create [<options>] <image> [<arguments> ...]
**Management Options**
* `-a, --arch <arch>`: Set arch if image can target multiple architectures (default: arm64)
* `--cap-add <cap>`: Add a Linux capability (e.g. `CAP_NET_RAW`, `NET_RAW`, or `ALL`)
* `--cap-drop <cap>`: Drop a Linux capability (e.g. `CAP_NET_RAW`, `NET_RAW`, or `ALL`)
* `--cidfile <cidfile>`: Write the container ID to the path provided
* `-d, --detach`: Run the container and detach from the process
* `--dns <ip>`: DNS nameserver IP address