From f3a469c84831be1fc21aa235d970b5e7e49b0c79 Mon Sep 17 00:00:00 2001
From: Justin Cormack <justin.cormack@docker.com>
Date: Wed, 11 May 2016 10:02:23 +0100
Subject: [PATCH] use capabilities not privileged for building ISO

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
---
 alpine/docker-compose.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/alpine/docker-compose.yml b/alpine/docker-compose.yml
index 2bd9d6d6e..681424136 100644
--- a/alpine/docker-compose.yml
+++ b/alpine/docker-compose.yml
@@ -7,7 +7,8 @@ services:
     volumes:
       - .:/mnt
   efi:
-    privileged: true
+    cap_add:
+      - sys_admin
     build:
       context: .
       dockerfile: Dockerfile.efi