Docker packetbeat:6.0.1Operation not permitted

Trying to run the packetbeat 6.0.1 container and getting an "Operation not permitted" error.

docker run setup --template -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=["localhost:9200"]'
/usr/local/bin/docker-entrypoint: line 13: /usr/share/packetbeat/packetbeat: Operation not permitted

docker run
/usr/local/bin/docker-entrypoint: line 8: /usr/share/packetbeat/packetbeat: Operation not permitted

Hi, I think you are missing the extra network capabilities required to run the container, see here.

OK, thanks. I'll give that a try...FYI I copy/pasted from here so if that is the fix then might need to update the documentation there too:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.