virtualisation.oci-containers.containers.<name>.capabilities

Capabilities to configure for the container. When set to true, capability is added to the container. When set to false, capability is dropped from the container. When null, default runtime settings apply.

Declarations

nixos/modules/virtualisation/oci-containers.nix

Type

lazy attribute set of (null or boolean)

Default

{ }

Example

{
  SYS_ADMIN = true;
  SYS_WRITE = false;
{