diff --git a/site/cni-plugin.md b/site/cni-plugin.md
index a3d114a3..2e5b3efd 100644
--- a/site/cni-plugin.md
+++ b/site/cni-plugin.md
@@ -108,5 +108,8 @@ For more information, see the
 
 ### Caveats
 
+- The program `nsenter` must be present on the host; it is required by
+  the CNI plugin.  In some distros (e.g. Alpine, Ubuntu) it is in the
+  util-linux package
 - The Weave Net router container must be running for CNI to allocate addresses
 - The CNI plugin does not add entries to weaveDNS.