Is there a trick to build docker container with privilege option?

Question

I have to add some rule to iptables, in the build process it give me an error because i need privilege so is there any way to get around it, i know that there no privilege option in build, or can i build and image without run it ?

score 2 · Answer 1 · answered Jan 11 '17 at 19:44

2

It's considered better practice from what I understand to use specific kernel capabilities:

docker run --cap-add NET_ADMIN <image> <command>

should get you what you need. You may need to also add SYS_ADMIN as well.

answered Jan 11 '17 at 19:44

Patrick

599

4

i want it in build time not in run time – Wissam Roujoulah Jan 24 '17 at 12:33
Unfortunately you have to add these flags during runtime. – Patrick Jan 24 '17 at 17:13
1

As a follow-up, see this thread for more information on the status of this feature: https://github.com/moby/moby/issues/1916 – Patrick Mar 13 '18 at 13:10

Is there a trick to build docker container with privilege option?

1 Answers1