Docker image now defaults to non-root user

[kcollins1]

If you also need these capabilities (for sub-1024 port binding as non-root user and raw socket use for ICMP, respectively), yes, you'd specify those in your container config.

refs:

• Docker run reference | Docker Documentation
• compose-spec/spec.md at master · compose-spec/compose-spec · GitHub