Network Namespace Support changed location to the directory containing your MySQL binaries (adjust the pathname for your system as necessary): cd /usr/local/mysql/bin To grant  CAP_SYS_ADMIN  capability to the appropriate binaries: setcap cap_sys_admin+ep ./mysqld setcap cap_sys_admin+ep ./mysql setcap cap_sys_admin+ep ./mysqlxtest To check  CAP_SYS_ADMIN  capability: shell>  getcap ./mysqld ./mysql ./mysqlxtest ./mysqld = cap_sys_admin+ep ./mysql = cap_sys_admin+ep ./mysqlxtest = cap_sys_admin+ep To remove  CAP_SYS_ADMIN  capability: setcap -r ./mysqld setcap -r ./mysql setcap -r ./mysqlxtest If you reinstall binaries to which you have previously applied  setcap , you must use setcap  again. For example, if you perform an in-place MySQL upgrade, failure to grant the  CAP_SYS_ADMIN  capability again results in namespace-related failures. The server fails with this error for attempts to bind to an address with a named namespace: Important A client invoked with the  --network-namespace  option fails like this: [ERROR] [MY-013408] [Server] setns() failed with error ’Operation not permitted’ ERROR: Network namespace error: Operation not permitted MySQL Configuration Assuming that the preceding host system prerequisites have been satisfied, MySQL enables configuring the server-side namespace for the listening (inbound) side of connections and the client-side namespace for the outbound side of connections. On the server side, the  bind_address ,  admin_address , and  mysqlx_bind_address  system variables have extended syntax for specifying the network namespace to use for a given IP address or host name on which to listen for incoming connections. To specify a namespace for an address, add a slash and the namespace name. For example, a server  my.cnf  file might contain these lines: [mysqld] bind_address = 127.0.1.1,192.0.2.2/red,198.51.100.2/blue admin_address = 102.0.2.2/red mysqlx_bind_address = 102.0.2.2/red These rules apply: •A network namespace can be specified for an IP address or a host name. •A network namespace cannot be specified for a wildcard IP address. 997