qemu-bridge-helper requires net_cap_admin+ep and net_cap_raw+ep to properly set up bridges.
As mentioned in includeos/IncludeOS#2316, we might be able to work around the need for manually setting capabilities on binaries ourselves by wrapping security.wrappers.<name>.capabilities around the qemu-bridge-helper executable.
I have not looked into how this is done yet, but figured it might be useful.
qemu-bridge-helperrequiresnet_cap_admin+epandnet_cap_raw+epto properly set up bridges.As mentioned in includeos/IncludeOS#2316, we might be able to work around the need for manually setting capabilities on binaries ourselves by wrapping security.wrappers.<name>.capabilities around the
qemu-bridge-helperexecutable.I have not looked into how this is done yet, but figured it might be useful.