diff --git a/spread.yaml b/spread.yaml
index b2bb3b951..0a6a6aff5 100644
--- a/spread.yaml
+++ b/spread.yaml
@@ -47,7 +47,8 @@ backends:
       echo "Allocating $SPREAD_SYSTEM..."
       docker_image=$(echo $SPREAD_SYSTEM | awk -F '-' '{print $1":"$2}')
       docker_arch=$(echo $SPREAD_SYSTEM | awk -F '-' '{print $NF}')
-      docker run --rm -e DEBIAN_FRONTEND=noninteractice \
+      docker run --cap-add SYS_ADMIN --security-opt apparmor=unconfined \
+        --rm -e DEBIAN_FRONTEND=noninteractice \
         -e usr=$SPREAD_SYSTEM_USERNAME -e pass=$SPREAD_SYSTEM_PASSWORD \
         --name $SPREAD_SYSTEM -d $docker_arch/$docker_image sh -c '
         set -x