Comment 1 for bug 1852398

Revision history for this message
Paul Goins (vultaire) wrote :

It should be noted that the prometheus docs also mention that the sysctl setting "net.ipv4.ping_group_range" can also be used to provide these privileges.

It seems like Focal may have this enabled out-of-the-box, but for Bionic, it may be reasonable to deploy the sysconfig charm as a subordinate, with the sysctl setting set to '{"net.ipv4.ping_group_range": "0 2147483647"}'.

If we want this to consistently work in the charm without sysctl settings, we could:

1. Have this charm set the above sysctl setting itself, or
2. Leave the sysctl setting alone, allow for using the apt package instead of the snap, and optionally enable the CAP_NET_RAW capability.