Use capabilities in Aerial-based docker-compose

2024-06-03 14:21:19 +02:00
parent b4750d8d81
commit 0cc278f19b
1 changed files with 5 additions and 1 deletions
@@ -38,7 +38,11 @@ services:
    depends_on:
      nv-cubb:
        condition: service_healthy
-    privileged: true
+    cap_drop:
+      - ALL
+    cap_add:
+      - SYS_NICE
+      - IPC_LOCK
    ipc: "container:nv-cubb"
    environment:
      USE_ADDITIONAL_OPTIONS: --log_config.global_log_options level,nocolor,time