docker run --cap-drop ALL myimage

Category: Docker

docker run --cap-drop ALL myimage

Drop all Linux capabilities for a hardened container

Removes all Linux capabilities for maximum security hardening. Grants nothing; you add back only what's needed.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.