container/init: configure interface lo

This enables loopback networking when owning the net namespace. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-01-11 03:32:21 +09:00
parent da3848b92f
commit 2494ede106
7 changed files with 353 additions and 0 deletions
--- a/container/container.go
+++ b/container/container.go
@@ -263,6 +263,8 @@ func (p *Container) Start() error {
 			CAP_SYS_ADMIN,
 			// drop capabilities
 			CAP_SETPCAP,
+			// bring up loopback interface
+			CAP_NET_ADMIN,
 			// overlay access to upperdir and workdir
 			CAP_DAC_OVERRIDE,
 		},