docs: Capabilities page - Images can store file-based capabilities
Author: polaratheneCreated Dec 21, 2023Updated Jan 9, 2024
https://dockerlabs.collabnix.com/advanced/security/capabilities/
These are inaccurate. The limitation was removed with BuildKit / buildx IIRC which has been the default image builder since Docker 23 (released Feb 2023), which can preserve extended file attributes.
I believe the main issue prior was that you'd lose the extended attributes via a COPY but they would otherwise remain intact so long as the image layer was on a file system that supported the file attributes? (I recall an issue with AUFS, which may still be problematic for some NAS systems)
Source: collabnix/dockerlabs