Privileged container for fuse mount

[iishiishii]

Is your feature request related to a problem? Please describe.
Our container needs --privileged (or --cap-add SYS_ADMIN + --device /dev/fuse) to support CVMFS FUSE mounts inside the container. CVMFS is used to stream neuroscience software modules into the container at /cvmfs/example.

Describe the solution you'd like
Support for --privileged flag in wslc run, or more granularly, support for --cap-add and --device flags to allow adding specific Linux capabilities (SYS_ADMIN) and device access (/dev/fuse) to containers.

Describe alternatives you've considered
Mounting CVMFS on the WSL host and bind-mounting /cvmfs into the container via -v /cvmfs:/cvmfs:ro, means users to manually install and configure CVMFS in their WSL distro, not great for an app targeting non-technical users.

Additional context
Project: Neurodesk App, desktop app for neuroscience computing. CVMFS streaming works on Docker and Podman with --privileged, but is blocked on WSL due to missing flag support.

Appreciate advice for workaround if this feature won't be considered for future release.
Thank you!

[github-actions]

Logs are required for review from WSL team

If this a feature request, please reply with '/feature'. If this is a question, reply with '/question'.
Otherwise, please attach logs by following the instructions below, your issue will not be reviewed unless they are added. These logs will help us understand what is going on in your machine.

How to collect WSL logs

Download and execute collect-wsl-logs.ps1 in an administrative powershell prompt:

Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/collect-wsl-logs.ps1" -OutFile collect-wsl-logs.ps1
Set-ExecutionPolicy Bypass -Scope Process -Force
.\collect-wsl-logs.ps1

The script will output the path of the log file once done.

If this is a networking issue, please use .\collect-wsl-logs.ps1 -LogProfile networking instead, following the instructions in Collect WSL logs for networking issues

Once completed please upload the output files to this GitHub issue.

See Collect WSL logs (recommended method).

If you choose to email these logs instead of attaching them to the bug, please send them to wsl-gh-logs@microsoft.com with the GitHub issue number in the subject, and include a link to your GitHub issue comment in the message body, and reply with '/emailed-logs'.

[iishiishii]

/feature

[github-actions]

Diagnostic information

Found '/feature', adding tag 'feature'