diff --git a/debian/patches/0001-allow_knet_handle_fallback_default_yes.patch b/debian/patches/0001-allow_knet_handle_fallback_default_yes.patch
new file mode 100644
index 0000000000000000000000000000000000000000..01fea814cd78ba74718d2ebbf60114ef8b9d8321
--- /dev/null
+++ b/debian/patches/0001-allow_knet_handle_fallback_default_yes.patch
@@ -0,0 +1,22 @@
+From: Dan Streetman <ddstreet@canonical.com>
+Origin: vendor
+Forwarded: not-needed
+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/corosync/+bug/1918735
+
+Set allow_knet_handle_fallback to yes in example conf file. This setting is
+required for transport=knet (which is the default) to work in an unprivileged
+container.
+
+--- a/conf/corosync.conf.example
++++ b/conf/corosync.conf.example
+@@ -1,4 +1,10 @@
+ # Please read the corosync.conf.5 manual page
++system {
++	# This is required to use transport=knet in an unprivileged
++	# environment, such as a container. See man page for details.
++	allow_knet_handle_fallback: yes
++}
++
+ totem {
+ 	version: 2
+ 
diff --git a/debian/patches/series b/debian/patches/series
index be289412dc317314d990b7c25eaa5dc7e9725a24..aae9348442d0fd97aeac1f8cb6290630fc3f9e45 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -2,3 +2,4 @@ Fix-various-typos-in-ChangeLog.patch
 Enable-PrivateTmp-in-the-systemd-service-files.patch
 Make-the-example-config-valid.patch
 Remove-bashism-from-configure-script.patch
+0001-allow_knet_handle_fallback_default_yes.patch