init:
  - linuxkit/init:6fe9d31a53bbd200183bb31edd795305e868d5a7
  - linuxkit/runc:a1b564248a0d0b118c11e61db9f84ecf41dd2d2a
  - linuxkit/containerd:06876ceef325e49e9ba119659357768d5df89075
  - linuxkit/ca-certificates:e44b0a66df5a102c0e220f0066b0d904710dcb10
services:
  - name: nginx
    image: "nginx:alpine"
    capabilities:
     - CAP_NET_BIND_SERVICE
     - CAP_CHOWN
     - CAP_SETUID
     - CAP_SETGID
     - CAP_DAC_OVERRIDE
trust:
  org:
    - library
    - linuxkit