# Linux-only overrides: microVM devices/caps that don't exist on macOS.
# Use with: docker compose -f docker-compose.yml -f docker-compose.linux.yml --profile linux up
services:
  spindle:
    # these two are required for cgroups, uncomment if testing
    # privileged: true
    # cgroup: host
    devices:
      - /dev/vsock:/dev/vsock
      - /dev/kvm:/dev/kvm
      - /dev/vhost-vsock:/dev/vhost-vsock
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
      - SYS_ADMIN
    security_opt:
      - label=disable
      - seccomp=unconfined