@jhernandez thanks for the reply. You are correct that the user must enable the trusted flag in the user interface. However, in this case, I do not think privileged: true is required, since he wants to use host machine networking, not start the containing in privileged mode.