I am using rootless containers, according to the buildah docs,
Moreover, pinging from a rootless container does not work because it lacks the
CAP_NET_RAWsecurity capability that the ping command requires. If you want to ping from within a rootless container, you can allow users to send ICMP packets using this
# sysctl -w "net.ipv4.ping_group_range=0 2000000"
This action would allow any process within these groups to send ping packets.
I ran that sysctl command, and I checked the permissions on the container it says,
Current IAB: ... !cap_net_raw ...
So if you set
net.ipv4.ping_group_range you do NOT need this capability? How are these two related?