joined process cannot write ns_last_pid of the container

Question

A process from a host joined a container's namepsace and is trying to write ns_last_pid file present in /proc/sys/kernel/ns_last_pid. but it is giving an error of Read only file system.

whereas i'm able to do this on the host's ns_last_pid file via this solution unable to write /proc/sys/kernel/ns_last_pid file

How to solve this issue?

Answer 1

You have to run your container in --privileged mode to be able to write to /proc/sys/kernel/ns_last_pid.