use capabilities not privileged for building ISO

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2025-08-07 09:44:00 +00:00 · 2016-05-11 10:02:23 +01:00 · 2016-05-11 10:02:23 +01:00 · b733dcd66e
commit b733dcd66e
parent fc370b0c21
1 changed files with 2 additions and 1 deletions
--- a/alpine/docker-compose.yml
+++ b/alpine/docker-compose.yml
@ -7,7 +7,8 @@ services:
    volumes:
      - .:/mnt
  efi:
-    privileged: true
+    cap_add:
+      - sys_admin
    build:
      context: .
      dockerfile: Dockerfile.efi