apptainer(1)

💅 apptainer(1) — the capability glow-up

ok so real talk bestie, this is the apptainer(1) manual page and today's main character is the apptainer-capability command 🎀 lowkey it's all about who gets to do what with Linux capabilities, and it is not a toy, so keep reading, iykyk.

---

✨ NAME ✨

apptainer-capability — Manage Linux capabilities for users and groups 💖

---

🦋 SYNOPSIS 🦋

apptainer capability

that's it, that's the vibe.

---

🌸 DESCRIPTION 🌸

Capabilities let you have fine grained control over the permissions that your containers need to run. ✨ literally the whole point — you don't hand out all the power, you hand out slices of power. slay.

💀 NOTE: the capability add and capability drop commands require root to run. Granting capabilities to users allows them to escalate privilege inside the container, and will likely give them a route to privilege escalation on the host system as well. Do not add capabilities to users who should not have root on the host system. fr fr, this is not a drill — if they shouldn't be root on the host, they shouldn't get caps. periodt. 🙈

---

🎀 OPTIONS 🎀

• -h, --help[=false] — help for capability. the classic. the icon. 🌈

---

⭐ EXAMPLE ⭐

All group commands have their own help output — so go poke at them, bestie:

$ apptainer help capability add
$ apptainer capability add --help

---

🧚 SEE ALSO 🧚

• apptainer(1)
• apptainer-capability-add(1)
• apptainer-capability-avail(1)
• apptainer-capability-drop(1)
• apptainer-capability-list(1)

go click through the whole friend group, they're all icons 💅

---

🔥 HISTORY 🔥

22-Oct-2026 — Auto generated by spf13/cobra. not a human, just a very busy little generator doing its thing 🫶

---

okay that's the whole page, mwah 💋 — this one was auto generated by spf13/cobra and it's dated Oct 2026, sitting pretty under the apptainer(1) banner. bye bestie, go grant capabilities responsibly 🍓👑