[libvirt-users] dropping capabilities in lxc containers

[Thierry Parmentelat]

Hi there

I’m not quite proficient with libvirt yet, and have been using it so far primarily to manage lxc containers
I was hoping to find a means to configure the set of capabilities that guests should drop, but came across a few web pages suggesting these were set in stone in the code
is this correct, or is there a means to tweak this set from the host via the xml config or a virsh command ?

any hint / pointer to documentation in this respect would be most appreciated

— Thierry