walters added a new comment to an issue you are following:
``
We don't want `nspawn --private-network` - then rpm-ostree would be unable to fetch
packages via HTTP. Maybe it's simplest to skip the environment variable and just
do:
```
#!/usr/bin/bash
set -euo pipefail
exec systemd-nspawn.real --capability=CAP_NET_ADMIN $@
```
``
To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/6602