apptainer capability

Manage Linux capabilities for users and groups

Synopsis

Capabilities allow you to have fine grained control over the permissions that your containers need to run.

NOTE: capability add/drop commands require root to run. Granting capabilities to users allows them to escalate privilege inside the container and will likely give them a route to privilege escalation on the host system as well. Do not add capabilities to users who should not have root on the host system.

apptainer capability

Examples

All group commands have their own help output:

$ apptainer help capability add
$ apptainer capability add --help

Options

-h, --help   help for capability

SEE ALSO

apptainer -

Linux container platform optimized for High Performance Computing (HPC) and Enterprise Performance Computing (EPC) * apptainer capability add - Add capabilities to a user or group (requires root) * apptainer capability avail - Show description for available capabilities * apptainer capability drop - Remove capabilities from a user or group (requires root) * apptainer capability list - Show capabilities for a given user or group

Auto generated by spf13/cobra on 7-Jun-2023