Unable to ping from LXC container (unpriviledged)

[p3ter_b]

--- sorry: accidentially posted this thread (and can't find a DELETE option?), but have already continued an existing thread:

Thread 'Ping with unprivileged user in LXC container / Linux capabilities'

Mar 19, 2018

On Proxmox VE 5.1, inside an LXC container, I cannot ping with unprivileged user. It gives me the following error:

$ ping google.ch
ping: socket: Operation not permitted

On the hostnode itself I can ping with both unprivileged user and root, but inside an LXC container only as root.

The following fixes it and gives all unprivileged users the required privileges to a open the socket:

$ sudo setcap cap_net_raw+p /bin/ping

Here's my question:
Would that be the right solution without exposing too many privileges?
How come this has suddenly changed? I remember ping...

• onlime
• lxc permissions ping proxmox ve 5.1 security
• Replies: 34
• Forum: Proxmox VE: Installation and configuration

• 

Other possibly related thread:

T

Post in thread 'No ping from non root user in Debian Buster LXC'

Apr 30, 2021

Hi

on my containers I just reinstall all packages containing setcap command and be already installed by the image.

That works in any way - hope useful for others too.

Here is a command which look at all installed packages and reinstall those ...

cd /var/lib/dpkg/info/ && apt install --reinstall $(grep -l 'setcap' * | sed -e 's/\.[^.]*$//g' | sort --unique)

• TomFreudenberg

• 

Sorry for the noise.
@admins: Feel free to delete this thread.