{
  "slug": "nerdctl-run-and-create-add-device-cgroup-rule-8f1a9f155b87",
  "title": "nerdctl run and create add --device-cgroup-rule",
  "tools": [
    "nerdctl"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-10-30T12:04:04.000Z",
  "announced_at": "2026-10-30T12:04:04.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When creating or running a container with a device cgroup rule, pass `--device-cgroup-rule` with a rule in `TYPE MAJOR:MINOR ACCESS` form.",
    "examples": [
      "nerdctl run --device-cgroup-rule='c 189:* rmw' <image>",
      "nerdctl create --device-cgroup-rule='c 189:* rmw' <image>"
    ],
    "gotchas": [
      "Version: v2.4.2",
      "--device-cgroup-rule: Adds a rule to the cgroup allowed devices list; format `TYPE MAJOR:MINOR ACCESS`."
    ]
  },
  "why_it_matters": "Configure device cgroup rules when creating or running a container.",
  "sources": [
    "https://github.com/containerd/nerdctl/releases/tag/v2.4.2",
    "https://github.com/containerd/nerdctl/blob/v2.4.2/docs/command-reference.md"
  ],
  "rank": 0.97017,
  "review_state": "approved",
  "provenance": {
    "run_id": "daily-20261030-12",
    "verdict_id": "daily-20261030-12:daily-20261030-12-ed783c2cec565afc-0:gate",
    "evidence_hash": "96f0bdea051e77eafee3501571a1cd22984ee80a5ad7aa4b4e782266a766e2ca"
  }
}