Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • you don't set capabilities on systemd-nspawn. You use the capability option of systemd-nspawn. Commented Oct 21, 2017 at 8:38
  • @sourcejedi I have tried adding both capabilities required by ntpd into systemd-nspawn service itself. Commented Oct 22, 2017 at 21:08
  • that's also the wrong way to describe what you want to do. The systemd-nspawn command drops capabilities, according to the option you pass it. You cannot increase capabilities by setting them on systemd-nspawn.service. Commented Oct 23, 2017 at 7:21
  • I see what you mean, and I think I explained it wrong. What I tried is setting capability on the service file for systemd-nspawn on host, passing same capability as --capability argument to systemd-nspawn in the host and setting this capability on ntpd service inside of the container. Hope that makes sense. Commented Oct 23, 2017 at 9:33