Can't list countries - Permission denied

[juliangall]

I am just testing this to see if I can get it to work in my environment. The simplest test seemed to be to list the countries, as described on the home page. This is Debian 12

1. I ran the container using:
   docker run -ti --cap-add=NET_ADMIN --cap-add=NET_RAW --name vpn -e TOKEN=e...17 -e TECHNOLOGY=NordLynx -d ghcr.io/bubuntux/nordvpn

2. No errors and the container is running:
   26175869c8ff ghcr.io/bubuntux/nordvpn "/init /bin/sh -c 'n…" 4 minutes ago Up 3 minutes vpn

3. When I run:
   docker run --rm ghcr.io/bubuntux/nordvpn nordvpn countries

I get lots of errors (edited here to remove duplicates:

User UID: 911
User GID: 911
───────────────────────────────────────

fix-attrs: warning: fix-attrs is deprecated, please fix volume permissions in your container manager instead
update-alternatives: using /usr/sbin/iptables-legacy to provide /usr/sbin/iptables (iptables) in manual mode
update-alternatives: using /usr/sbin/ip6tables-legacy to provide /usr/sbin/ip6tables (ip6tables) in manual mode
iptables v1.8.7 (legacy): can't initialize iptables table `filter': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.

Firewall is up, everything has to go through the vpn
Enabling connection to secure interface and docker network

iptables v1.8.7 (legacy): can't initialize iptables table `filter': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
getsockopt failed strangely: Operation not permitted

iptables v1.8.7 (legacy): can't initialize iptables table `filter': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
getsockopt failed strangely: Operation not permitted

iptables v1.8.7 (legacy): can't initialize iptables table `filter': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
getsockopt failed strangely: Operation not permitted
No inet6 network
[custom-init] No custom files found, skipping...
[ls.io-init] done.