8:25 a.m.
Hi guys.
I'm hoping an experts may share some thoughts..
Centos 7 container(macvlan) where I try to use 'nft' is not
happy:
[root@baseos-c8kubernode1 /]# nft add table inet filter
Error: Could not add table: Operation not permitted
add table inet filter
Is that possible and I'm missing some bits I should setup up
a container with?
many thanks, L.
10:36 a.m.
What do you get after "nft list ruleset"?
Kind regards,
Rudolf Vesely
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, March 5, 2021 2:25 PM, lejeczek via Podman <podman(a)lists.podman.io>
wrote:
> Hi guys.
>
> I'm hoping an experts may share some thoughts..
> Centos 7 container(macvlan) where I try to use 'nft' is not
> happy:
>
> [root@baseos-c8kubernode1 /]# nft add table inet filter
> Error: Could not add table: Operation not permitted
> add table inet filter
>
> Is that possible and I'm missing some bits I should setup up
> a container with?
> many thanks, L.
>
> Podman mailing list -- podman(a)lists.podman.io
> To unsubscribe send an email to podman-leave(a)lists.podman.io
</podman(a)lists.podman.io>
11:41 a.m.
On 05/03/2021 16:36, Rudolf Vesely via Podman wrote:
What do you get after "nft list ruleset"?
Kind regards,
Rudolf Vesely
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, March 5, 2021 2:25 PM, lejeczek via Podman <podman(a)lists.podman.io>
wrote:
> Hi guys.
>
> I'm hoping an experts may share some thoughts..
> Centos 7 container(macvlan) where I try to use 'nft' is not
> happy:
>
> [root@baseos-c8kubernode1 /]# nft add table inet filter
> Error: Could not add table: Operation not permitted
> add table inet filter
>
> Is that possible and I'm missing some bits I should setup up
> a container with?
> many thanks, L.
>
> Podman mailing list -- podman(a)lists.podman.io
> To unsubscribe send an email to podman-leave(a)lists.podman.io
</podman(a)lists.podman.io>
_______________________________________________
Podman mailing list -- podman(a)lists.podman.io
To unsubscribe send an email to podman-leave(a)lists.podman.io
Since I posted I
realized it's from the host I should be
operating a namespace and not inside a container.
thanks, L.
1673
days inactive
1691
days old
2 comments
2 participants
participants (2)
-
lejeczek -
Rudolf Vesely