--privileged flag required by zoekt-indexserver, repo-updater, indexer, query-runner; why?

[slimsag]

Without this flag, on Docker for Mac the DNS lookup of other containers fails.

[slimsag]

Apparently, installing bind-tools fixes the issue. I noticed this because after installing the dig tool, DNS lookup suddenly started passing:

/ # nslookup sourcegraph-frontend-internal
nslookup: can't resolve '(null)': Name does not resolve

Name:      sourcegraph-frontend-internal
Address 1: 172.29.0.16 sourcegraph-frontend-internal.sourcegraph
/ # dig sourcegraph-frontend-internal
sh: dig: not found
/ # apk add --no-cache bind-tools
fetch http://dl-cdn.alpinelinux.org/alpine/v3.8/main/x86_64/APKINDEX.tar.gz
fetch http://dl-cdn.alpinelinux.org/alpine/v3.8/community/x86_64/APKINDEX.tar.gz
(1/5) Installing libgcc (6.4.0-r9)
(2/5) Installing json-c (0.13.1-r0)
(3/5) Installing libxml2 (2.9.8-r1)
(4/5) Installing bind-libs (9.12.2_p1-r0)
(5/5) Installing bind-tools (9.12.2_p1-r0)
Executing busybox-1.28.4-r1.trigger
OK: 11 MiB in 25 packages
/ # nslookup sourcegraph-frontend-internal
Server:		127.0.0.11
Address:	127.0.0.11#53

Non-authoritative answer:
Name:	sourcegraph-frontend-internal
Address: 172.29.0.16

After discovering this, it became apparent I am not the only one to run into this: nodejs/docker-node#339

I will update our images to all install bind-tools.

[slimsag]

sourcegraph/godockerize@5cf4e6d