The alternative to using the --privileged
flag is:
--security-opt systempaths=unconfined --security-opt apparmor:unconfined
this will allow you to run the following commands in the container as mentioned in the blog provided by @deadcoder0904:
sysctl vm.overcommit_memory=1
# OR
echo 1 > /proc/sys/vm/overcommit_memory