ct-Open-Source / ct-Smart-Home

A ready-to-use Node-RED setup for home automation

Home Page:https://ct.de/smarthome

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Privileged and Capabilities in docker-compose file

siredmar opened this issue · comments

Please check your docker-compose file:

privileged: true
cap_add:
- SYS_ADMIN
- NET_ADMIN

It seems you have some redundant settings. I also recommend not running the container privileged unless really, really needed. In most cases you can achieve the wanted effect by adding some capabilities and mounts for your specific needs.

The container now runs non priviledged. Thanks for the tipp!