allow unprivileged users to use ping in application containers

Signed-off-by: Gwendolyn <[email protected]>

Author: gwenya

internal/server/instance/drivers/driver_lxc.go

@@ -2336,6 +2336,11 @@ func (d *lxc) startCommon() (string, []func() error, error) {
 			return "", nil, err
 		}
 
+		err = lxcSetConfigItem(cc, "lxc.sysctl.net.ipv4.ping_group_range", "0 65536")
+		if err != nil {
+			return "", nil, err
+		}
+
 		// Get all mounts so far.
 		lxcMounts := []string{"/dev", "/proc", "/sys", "/sys/fs/cgroup"}
 		for _, mount := range cc.ConfigItem("lxc.mount.entry") {