You are not logged in.
I'm not talking about linux.kernel_modules; I want to load modules from within an LXD container.
On an archlinux host, I created a privileged archlinux container, installed the same kernel package as the host and ran
# modprobe ext4
modprobe: ERROR: could not insert 'ext4': Function not implementedI tried to strace it:
# strace modprobe ext4
execve("/usr/bin/modprobe", ["modprobe", "ext4"], 0x7ffca0b86e38 /* 11 vars */) = 0
brk(NULL) = 0x55a1f0a82000
arch_prctl(0x3001 /* ARCH_??? */, 0x7ffd88d7b810) = -1 EINVAL (Invalid argument)
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=20767, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 20767, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4565192000
close(3) = 0
openat(AT_FDCWD, "/usr/lib/libzstd.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=862080, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4565190000
mmap(NULL, 860224, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f45650bd000
mmap(0x7f45650c9000, 724992, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7f45650c9000
mmap(0x7f456517a000, 81920, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbd000) = 0x7f456517a000
mmap(0x7f456518e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd1000) = 0x7f456518e000
close(3) = 0
openat(AT_FDCWD, "/usr/lib/liblzma.so.5", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=206792, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 204824, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f456508a000
mmap(0x7f456508e000, 135168, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f456508e000
mmap(0x7f45650af000, 49152, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x25000) = 0x7f45650af000
mmap(0x7f45650bb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x31000) = 0x7f45650bb000
close(3) = 0
openat(AT_FDCWD, "/usr/lib/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=100296, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 102416, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4565070000
mmap(0x7f4565073000, 57344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4565073000
mmap(0x7f4565081000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x7f4565081000
mmap(0x7f4565088000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f4565088000
close(3) = 0
openat(AT_FDCWD, "/usr/lib/libcrypto.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=5214856, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 5229408, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4564a00000
mmap(0x7f4564ab1000, 3244032, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb1000) = 0x7f4564ab1000
mmap(0x7f4564dc9000, 864256, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3c9000) = 0x7f4564dc9000
mmap(0x7f4564e9c000, 385024, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x49b000) = 0x7f4564e9c000
mmap(0x7f4564efa000, 11104, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4564efa000
close(3) = 0
openat(AT_FDCWD, "/usr/lib/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=728128, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 147912, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f456504b000
mmap(0x7f456504f000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f456504f000
mmap(0x7f456506a000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1f000) = 0x7f456506a000
mmap(0x7f456506e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f456506e000
close(3) = 0
openat(AT_FDCWD, "/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20:\2\0\0\0\0\0"..., 832) = 832
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1961632, ...}, AT_EMPTY_PATH) = 0
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
mmap(NULL, 2006640, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4564816000
mmap(0x7f4564838000, 1429504, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f4564838000
mmap(0x7f4564995000, 360448, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17f000) = 0x7f4564995000
mmap(0x7f45649ed000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1d6000) = 0x7f45649ed000
mmap(0x7f45649f3000, 52848, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f45649f3000
close(3) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4565049000
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4565046000
arch_prctl(ARCH_SET_FS, 0x7f4565046740) = 0
set_tid_address(0x7f4565046a10) = 218
set_robust_list(0x7f4565046a20, 24) = 0
rseq(0x7f4565047060, 0x20, 0, 0x53053053) = 0
mprotect(0x7f45649ed000, 16384, PROT_READ) = 0
mprotect(0x7f456506e000, 4096, PROT_READ) = 0
mprotect(0x7f4564e9c000, 372736, PROT_READ) = 0
mprotect(0x7f4565088000, 4096, PROT_READ) = 0
mprotect(0x7f45650bb000, 4096, PROT_READ) = 0
mprotect(0x7f456518e000, 4096, PROT_READ) = 0
mprotect(0x55a1efbfc000, 8192, PROT_READ) = 0
mprotect(0x7f45651c9000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7f4565192000, 20767) = 0
newfstatat(2, "", {st_mode=S_IFREG|0644, st_size=6115, ...}, AT_EMPTY_PATH) = 0
getrandom("\x8d\xb1\xdc\x39\x29\xab\x1d\x68", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55a1f0a82000
brk(0x55a1f0aa3000) = 0x55a1f0aa3000
uname({sysname="Linux", nodename="a", ...}) = 0
newfstatat(AT_FDCWD, "/etc/modprobe.d", {st_mode=S_IFDIR|0755, st_size=0, ...}, 0) = 0
openat(AT_FDCWD, "/etc/modprobe.d", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55a1f0a823e0 /* 2 entries */, 32768) = 48
getdents64(3, 0x55a1f0a823e0 /* 0 entries */, 32768) = 0
close(3) = 0
newfstatat(AT_FDCWD, "/run/modprobe.d", 0x7ffd88d78550, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/local/lib/modprobe.d", 0x7ffd88d78550, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/modprobe.d", {st_mode=S_IFDIR|0755, st_size=36, ...}, 0) = 0
openat(AT_FDCWD, "/lib/modprobe.d", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=36, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55a1f0a82420 /* 4 entries */, 32768) = 112
newfstatat(3, "systemd.conf", {st_mode=S_IFREG|0644, st_size=773, ...}, 0) = 0
getdents64(3, 0x55a1f0a82420 /* 0 entries */, 32768) = 0
close(3) = 0
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/modules.softdep", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1888, ...}, AT_EMPTY_PATH) = 0
read(3, "# Soft dependencies extracted fr"..., 4096) = 1888
read(3, "", 4096) = 0
close(3) = 0
openat(AT_FDCWD, "/lib/modprobe.d/systemd.conf", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=773, ...}, AT_EMPTY_PATH) = 0
read(3, "# SPDX-License-Identifier: LGPL"..., 4096) = 773
read(3, "", 4096) = 0
close(3) = 0
openat(AT_FDCWD, "/proc/cmdline", O_RDONLY|O_CLOEXEC) = 3
read(3, "BOOT_IMAGE=/sys/archlinux/boot/v"..., 4095) = 176
read(3, "", 3919) = 0
close(3) = 0
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/modules.dep.bin", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1054221, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 1054221, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4564f44000
close(3) = 0
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/modules.alias.bin", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1529510, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 1529510, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f45646a0000
close(3) = 0
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/modules.symbols.bin", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=807888, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 807888, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f45645da000
close(3) = 0
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/modules.builtin.alias.bin", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=7089, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 7089, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4565196000
close(3) = 0
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/modules.builtin.bin", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=9703, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 9703, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4565193000
close(3) = 0
newfstatat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/kernel/lib/crc16.ko.zst", {st_mode=S_IFREG|0644, st_size=1911, ...}, 0) = 0
newfstatat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/kernel/fs/mbcache.ko.zst", {st_mode=S_IFREG|0644, st_size=6389, ...}, 0) = 0
newfstatat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/kernel/fs/jbd2/jbd2.ko.zst", {st_mode=S_IFREG|0644, st_size=76159, ...}, 0) = 0
openat(AT_FDCWD, "/sys/module/ext4/initstate", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/sys/module/ext4", 0x7ffd88d784a0, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sys/module/jbd2/initstate", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/sys/module/jbd2", 0x7ffd88d784a0, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/modules/6.4.6-zen1-1-zen/kernel/fs/jbd2/jbd2.ko.zst", O_RDONLY|O_CLOEXEC) = 3
read(3, "(\265/\375\244\277", 6) = 6
lseek(3, 0, SEEK_SET) = 0
read(3, "(\265/\375\244", 5) = 5
mmap(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4564f23000
read(3, "\277\314\6\0D\33\2", 7) = 7
mmap(NULL, 577536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f456454d000
brk(0x55a1f0ac6000) = 0x55a1f0ac6000
read(3, ":\324\241jK\20P\354\270\1\207\37\310 zIF|\324D|\217\314\27\334~(\243kb\216\n"..., 17259) = 17259
mremap(0x7f4564f23000, 135168, 266240, MREMAP_MAYMOVE) = 0x7f456450c000
read(3, "\213\265\334)\236\2\230\2\224\2c\230]4\227\1\370.\341\245\344^\244\306\367\245xC\243\217+\330"..., 8111) = 8111
read(3, "z\201|\35A@\346q\3a\336\365\277\272\317t\267\206\366\366 \275\322\233\370\203\350\33\0\211.\32"..., 7226) = 7226
read(3, "\264 \1\1\1\20\1\7\4\3\2\10\6\5\1GCC) 13.1.1230714"..., 1297) = 1297
mremap(0x7f456450c000, 266240, 397312, MREMAP_MAYMOVE) = 0x7f45644ab000
read(3, "4!{\207\25\223\20e1\10s\25\2 \247[\"\2\6%\r(\27'\3+\2\r*\5\37-"..., 1433) = 1433
read(3, "\24\37\1\375\177\2\277\3\277\1\237\6\7@\5\300\n\v\4\t\334\r\375\20\21\5\17\35\341\24\25\10"..., 1477) = 1477
read(3, "\202\216-\30@y\3[\233M\221X\21#\2217\250T\3-\340\301~\206a\30\326\221\216\372\343m"..., 1505) = 1505
read(3, "\4\2\0byopehowbhjbppu_mp\1\3\5\7\v\16\23\27-5:"..., 671) = 671
read(3, "\204\21\37\24?\f]\25z(\231(\2\266)\333D\2\1D'EMau@\233b\273x\335\0"..., 561) = 561
read(3, "\24#\240\320\17\340 \f`\342\6\220\r\240h\314\6\340 \r`\355\320\f\340 \16`\371\240\3\7"..., 1108) = 1108
read(3, "\332O\200\238 b\353\327\357\201C\177\337\315\0101;\234\354\325\t\324Iy \352= \264\242N"..., 2235) = 2235
read(3, "\244-o\202<\245\220\367\316`\231\274F\200\\~S\240\224P\257X\347\0\25\7\340\226/\0\30f"..., 1536) = 1536
read(3, "\244\26\205\240\232\224c\200\371\324\303\300\3e\247\34305\353\361 \322\26\\#\\(B\\`a|"..., 809) = 809
read(3, "\342\6\23\22\240\273\1 \305\360\357\341Z\307\245\311\357>U\365N\2G\377\377\377G\377\377\377\177r"..., 612) = 612
read(3, "\"\310\26\24\220\33\36\30Z\347\234\377^\201Ly\313\222\"$\314\314\30\23\211\242\30M\246\346\2018"..., 676) = 676
read(3, "\220ld_p65pfx_.p.opttt\201&\250\321\317\30!\10\1\2A\25A"..., 595) = 595
read(3, "\262\t\37\30p\315\3\0\320P\336\264\213\22,\333\250H;\374\305a\4\3\0\0\300\35\317\20#\20"..., 1513) = 1513
read(3, "t\202gfpxck9\0autokm7_hrc8mtdir\0\4\374\377\240"..., 5135) = 5135
read(3, "\24\215\200\215\230\1\267#DQ\\\306\354\17\270\34'\234\334\377\f\271\33D\213Pa\300q\236\177("..., 4410) = 4410
mremap(0x7f45644ab000, 397312, 528384, MREMAP_MAYMOVE) = 0x7f45644ab000
read(3, "\332\262\\+6\20\250\347\1 +\17f#\277\337\34\311g\re\303\363\33\236oA<\264\363\6s"..., 4074) = 4074
read(3, "\373L\210\22'\1'\1)\1y\326\260{U\255\10\200\353\330ZEW\201\6\255\256\371\250S\246m"..., 1476) = 1476
read(3, "\227e\222\222\0\223\0\220\0007\26`\233\275\373rL\325)\366>\244\25i@[\372\17\351\3419\227"..., 767) = 767
read(3, "G\331b]\0`\0c\0\1|u\375\357\0\4$\353\273\346\353\273\336^\202\356%-5+\351\224"..., 557) = 557
read(3, "\266\342\2064\240\2666\274<<\303'\326\344\357\265y\204\313,\201%)Hc\250\377\204\213\316p\f"..., 563) = 563
read(3, "*E\264\20CP\246\321\3\377\2660\272J>\307\5\235\340\332\273\316K\367\366\207f\nQ\22\300\204"..., 1092) = 1092
read(3, "\206\342\2035\260t\35\254\307\343=\313E\6\0\36\376\203m\320\306,\267\334\\B)w\223I\246\224"..., 544) = 544
read(3, "t\22T\254Y\254\242\254\260\254\306\254\315\254\321\254\324\254\333\254A\255B\255C\255E\255G\255L\255"..., 460) = 460
read(3, "\312H\370\21>0f\335\375\0106\10\213\341X`\6Lw\5\256O\1G\22\252`\5\22I\274;"..., 1380) = 1380
read(3, "\212\211\260 6 *\335md\266\206J\240D-\311+\235\242\311\273&\310\301\6\261'#v&\356"..., 3048) = 3048
mremap(0x7f45644ab000, 528384, 659456, MREMAP_MAYMOVE) = 0x7f45644ab000
read(3, "zEH\16D\360v\233\3\314\322\26\25Ke\232T\2\33N\321\36\303\204\216\363\253\325\343=\213C"..., 1569) = 1569
read(3, "\252WH\25C0^\232\16]\177\232\265\261\244S\304\373\n\265\20M\2462\225\20W\240\262\231\350?"..., 2444) = 2444
read(3, "\315\253\201\32", 4) = 4
read(3, "", 4) = 0
munmap(0x7f456454d000, 577536) = 0
init_module(0x7f45644ab010, 445631, "") = -1 ENOSYS (Function not implemented)
write(2, "modprobe: ERROR: could not inser"..., 67modprobe: ERROR: could not insert 'ext4': Function not implemented
) = 67
munmap(0x7f45644ab000, 659456) = 0
close(3) = 0
munmap(0x7f4564f44000, 1054221) = 0
munmap(0x7f45646a0000, 1529510) = 0
munmap(0x7f45645da000, 807888) = 0
munmap(0x7f4565196000, 7089) = 0
munmap(0x7f4565193000, 9703) = 0
exit_group(1) = ?
+++ exited with 1 +++I checked the capability state:
# capsh --current
Current: =ep
Current IAB: All caps were dropped, most notably
cap_sys_module, which is required for loading modules.
This option is undocumented and the source code doesn't appear to use it but I tried editing the container's config such that:
raw.lxc: lxc.cap.drop =and predictably, it still dropped every cap.
Offline