Use capabilities in AW2S-based docker compose

2024-06-03 14:21:19 +02:00
parent 9dd52c9d44
commit b4750d8d81
1 changed files with 5 additions and 1 deletions
@@ -1,9 +1,13 @@
 services:
    oai-gnb:
        image: oai-gnb-aw2s:latest
-        privileged: true
        network_mode: "host"
        container_name: oai-gnb-aw2s
+        cap_drop:
+            - ALL
+        cap_add:
+            - SYS_NICE
+            - IPC_LOCK
        ulimits:
          core: -1 # for core dumps
        environment: