To achieve the ability to create bridges inside a VE you have at least:
1) add CAP_NET_ADMIN capability to this VE (via vzctl)
2) patch the kernel to add NETIF_F_VIRTUAL flag to bridge device
--- ./net/bridge/br_device.c.br 2007-06-25 13:36:46.000000000 +0400
+++ ./net/bridge/br_device.c 2007-08-31 17:12:39.000000000 +0400
@@ -216,5 +216,6 @@ void br_dev_setup(struct net_device *dev
dev->priv_flags = IFF_EBRIDGE;
dev->features = NETIF_F_SG | NETIF_F_FRAGLIST | NETIF_F_HIGHDMA |
- NETIF_F_TSO | NETIF_F_NO_CSUM | NETIF_F_GSO_ROBUST;
+ NETIF_F_TSO | NETIF_F_NO_CSUM | NETIF_F_GSO_ROBUST |
+ NETIF_F_VIRTUAL;
}
at the glance that should be enough.
But could you please tell me why do you want this???
Thanks!