apptainer(1)

💅 apptainer-capability-drop — the apptainer(1) glow-up

okay so bestie, welcome to the apptainer manual — specifically the apptainer-capability-drop page. this one's giving "root-only power move" energy and honestly? iconic. let's get into it 🎀

---

✨ NAME ✨

apptainer-capability-drop — remove capabilities from a user or group (requires root)

like, you're literally taking away someone's superpowers. very main character. root required tho, no cap.

---

🦋 SYNOPSIS 🦋

apptainer capability drop [drop options...]

that's the whole vibe. short, sweet, slays.

---

🌸 DESCRIPTION 🌸

okay so here's the tea ☕ — this command removes Linux capabilities from a user/group.

⚠️ NOTE: this command requires root to run. like, actual root. no shortcuts, no "but my friend said—". root. periodt.

the capabilities argument must be separated by commas and is not case sensitive (so AUDIT_READ and audit_read are the same thing, we love a flexible queen 💅).

wanna see what capabilities even exist before you start dropping them? type apptainer capability avail or refer to the capabilities manual: man 7 capabilities. iykyk 🧚

---

💖 OPTIONS 💖

• -g, --group="" — manage capabilities for a group
• -h, --help[=false] — help for drop (the "wait what does this do again" button 🫶)
• -u, --user="" — manage capabilities for a user

notice the empty-string defaults on --group and --user? yeah, you gotta actually give them a value. no vibes-only input allowed 🙈

---

⭐ EXAMPLE ⭐

here's how the cool kids do it:

$ sudo apptainer capability drop --user nobody AUDIT_READ,CHOWN
$ sudo apptainer capability drop --group nobody audit_write

see that comma in the first one? that's the whole "separated by commas" thing in action. and notice audit_write is lowercase in the second one — case insensitive, we been knew 💜

to drop all the capabilities for a user:

$ sudo apptainer capability drop --user nobody all

the all keyword. total removal. absolutely feral. 😭🔥

---

🎀 SEE ALSO 🎀

• apptainer-capability(1) — the parent page, go say hi to it 🫶

---

🌈 HISTORY 🌈

22-Oct-2026 — auto generated by spf13/cobra

---

okay that's the whole page bestie, you're officially certified in capability-dropping 💅✨

auto generated by spf13/cobra — Oct 2026 — apptainer(1) 🦋

now go forth and sudo responsibly, mwah 💖