docker: seccomp=unconfined

golang/go#35547
cyb70289 · Mar 17, 2021 · eff87ab · eff87ab
1 parent eb61506
commit eff87ab
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/docker b/docker
@@ -112,9 +112,12 @@ $ docker manifest annotate cyb70289/busybox cyb70289/busybox-arm64 --arch arm64
 $ docker manifest push --purge cyb70289/busybox
 
 
-enable bind mount in docker
-===========================
-$ docker run --cap-add SYS_ADMIN --security-opt apparmor=unconfined ...
+docker run with privilege
+=========================
+$ docker run --cap-add SYS_ADMIN \
+             --security-opt apparmor=unconfined \
+             --security-opt seccomp=unconfined \
+             ...
 
 
 docker in docker