From 9dbd66776e40fe6c058f6b5983d0e6409ada51f7 Mon Sep 17 00:00:00 2001
From: James Ketrenos <james_git@ketrenos.com>
Date: Thu, 6 Mar 2025 14:03:27 -0800
Subject: [PATCH] Add cap to docker-compose so ze-monitor can be run

---
 docker-compose.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index a61746a..07d304f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,6 +13,10 @@ services:
     volumes:
       - ./cache:/root/.cache
       - ./src:/opt/airc/src:rw
+    cap_add: # used for running ze-monitor within airc container
+      - CAP_DAC_READ_SEARCH # Bypass all filesystem read access checks
+      - CAP_PERFMON         # Access to perf_events (vs. overloaded CAP_SYS_ADMIN)
+      - CAP_SYS_PTRACE      # PTRACE_MODE_READ_REALCREDS ptrace access mode check
 
   jupyter:
     build: