Get rid of --privileged in Docker command line (EFForg#17376)

pipboy96 · Hainish · commit 895dca239160 · 2019-02-26T13:22:55.000-08:00
diff --git a/test/run_travis.sh b/test/run_travis.sh
@@ -79,8 +79,8 @@ elif [ "$TEST" == "validations" ] || [ "$TEST" == "fetch" ] || [ "$TEST" == "pre
 
     if [ "$TEST" == "fetch" ]; then
       echo >&2 "Testing test URLs in all changed rulesets."
-      # --privileged is required here for miredo to create a network tunnel
-      docker run --rm -ti -v $(pwd):/opt -e RULESETS_CHANGED="$RULESETS_CHANGED" --privileged httpse bash -c "echo 0 > /proc/sys/net/ipv6/conf/all/disable_ipv6 && service miredo start && service tor start && test/fetch.sh"
+      # NET_ADMIN capability is required here for miredo to create a network tunnel
+      docker run --rm -ti -v $(pwd):/opt -e RULESETS_CHANGED="$RULESETS_CHANGED" --sysctl net.ipv6.conf.all.disable_ipv6=0 --cap-add NET_ADMIN --cap-add MKNOD httpse bash -c "mkdir -p /dev/net && mknod /dev/net/tun c 10 200 && service miredo start && service tor start && test/fetch.sh"
     fi
 
     if [ "$TEST" == "preloaded" ]; then
