create net_namespace failed: Operation not permitted about nsproxy

[nlzy]

Hi,

Unprivileged user-namespace is disabled by defualt on Debian 10.

Use this command to enable it, then nsproxy should work:

sudo sysctl -w kernel.unprivileged_userns_clone=1

This setting will be discarded on next reboot, use this command to save permanently:

echo 'kernel.unprivileged_userns_clone=1' | sudo tee /etc/sysctl.d/00-local-userns.conf

Or consider upgrading your OS to Debian 11+, which enable this feature by default, see
https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#linux-user-namespaces

[wholenewx]

Hi nlzy

Thanks a lot!

I had updated the kernel of Debian 10 from 4.19 to 5.10 and now nsproxy works good.

Next time, with your advice, no kernel update is needed, it's more convenient.

Thanks again!