Container accessing Docker API and mounting Azure File Storage breaks whole machine about for-azure HOT 4 OPEN

@manixx Feel free to join our Docker Community slack channel in order to share some of the logs:
https://blog.docker.com/2016/11/introducing-docker-community-directory-docker-community-slack/

One thing to keep in mind, is that you are running the container as privileged, which means that it has access to all devices on the host.
https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities
I would limit the devices to what the container actually needs, see:
moby/moby#22197 (comment)

from for-azure.

@FrenchBen Thanksf ro reply. I will try to minimize the devices and try again.

from for-azure.

@FrenchBen I tried it with the --cap-add flag and added only SYS_ADMIN:

docker run -v /var/run/docker.sock:/var/run/docker.sock --cap-add SYS_ADMIN infra-log

which leads the same results.

from for-azure.

@manixx Do you have a repo, you can share that has all of the above, so that I can take a look at your build and test it as well on my end?

from for-azure.