[GitHub] joshuabuildsthings opened a new issue #3454: Control Container Capabilities?

[GitBox <gi...@apache.org>]

joshuabuildsthings opened a new issue #3454: Control Container Capabilities?
URL: https://github.com/apache/incubator-openwhisk/issues/3454
 
 
   ##This is a feature request, not a bug report.
   
   It looks like the OpenWhisk Invoker automatically drops the Net Admin Capability for all Action containers. Is it possible to keep this capability on a per Action basis?
   
   [Invoker with --cap-drop](https://github.com/apache/incubator-openwhisk/blob/master/core/invoker/src/main/scala/whisk/core/invoker/InvokerReactive.scala)
   
   If not, is it possible to add functionality to configure the capabilities on a per Action basis?
   
   I want this because I have a use case where using tools like tc to throttle bandwidth would be useful. As these are lightweight & periodic tasks, I think FaaS/Serverless via OpenWhisk is the right way to go.
   
   ## Expected Results
   To be able to configure capabilities of container when configuring the Action.
   
   ## Actual Results
   NET_RAW & NET_ADMIN are explicitly stripped by the Invoker. There appears to be no way to configure capabilities.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services