use capabilities not privileged for building ISO

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2025-09-10 11:21:05 +00:00 · 2016-05-11 10:02:23 +01:00
parent 952bb2d3db
commit f3a469c848
1 changed files with 2 additions and 1 deletions
--- a/alpine/docker-compose.yml
+++ b/alpine/docker-compose.yml
@@ -7,7 +7,8 @@ services:
    volumes:
      - .:/mnt
  efi:
-    privileged: true
+    cap_add:
+      - sys_admin
    build:
      context: .
      dockerfile: Dockerfile.efi