Don't use privelaged

gnosisguild · Nov 25, 2024 · 5d02f80 · 5d02f80
1 parent c7257c3
commit 5d02f80
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/packages/ciphernode/net/tests/docker-compose.yaml b/packages/ciphernode/net/tests/docker-compose.yaml
@@ -12,7 +12,9 @@ services:
       DIAL_TO: "/ip4/172.16.238.12/udp/9091/quic-v1"
       BLOCK_MDNS: ${BLOCK_MDNS:-false}
     entrypoint: ["/app/entrypoint.sh"]
-    privileged: true
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
 
   bob:
     build: 
@@ -27,7 +29,9 @@ services:
       DIAL_TO: "/ip4/172.16.238.12/udp/9091/quic-v1"
       BLOCK_MDNS: ${BLOCK_MDNS:-false}
     entrypoint: ["/app/entrypoint.sh"]
-    privileged: true
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
 
 
   charlie:
@@ -42,7 +46,9 @@ services:
       QUIC_PORT: 9091
       BLOCK_MDNS: ${BLOCK_MDNS:-false}
     entrypoint: ["/app/entrypoint.sh"]
-    privileged: true
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
 
 
 networks: