How to allow certain commands?

[zakhooi]

Hi,
I use this container and it works fine.
I start it using SIAB_SUDO=false so the guest account has limited access.
Now I do want to allow a few commands such as ping or nslookup.
How do I start the container in such a way sudo is not allowed except for a few commands?

Thanks in advance.

[poggenpower]

You don't need SIAB_SUDO to install packages, but you need to run the container as root. This doesn't mean the shell user is root too.
If your don't want to run as root at all, you need to build your own container. This should be pretty easy, if you use this container as base images and simply add the required packages.