Use capabilities in Aerial-based docker-compose

0cc278f1 · Robert Schmidt · b4750d8d · 0cc278f1
Commit 0cc278f1 authored Apr 23, 2024 by Robert Schmidt
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 1 deletion

ci-scripts/yaml_files/sa_gnb_aerial/docker-compose.yaml ci-scripts/yaml_files/sa_gnb_aerial/docker-compose.yaml +5 -1

No files found.
--- a/ci-scripts/yaml_files/sa_gnb_aerial/docker-compose.yaml
+++ b/ci-scripts/yaml_files/sa_gnb_aerial/docker-compose.yaml
@@ -38,7 +38,11 @@ services:
    depends_on:
      nv-cubb:
        condition: service_healthy
-    privileged: true
+    cap_drop:
+      - ALL
+    cap_add:
+      - SYS_NICE
+      - IPC_LOCK
    ipc: "container:nv-cubb"
    environment:
      USE_ADDITIONAL_OPTIONS: --log_config.global_log_options level,nocolor,time