# Docker cap SYS\_ADMIN and connect

**URL:** <https://discuss.hashicorp.com/t/docker-cap-sys-admin-and-connect/33763>\
**Category:** Nomad\
**Tags:** connect\
**Created:** [January 2, 2022, 2:41pm UTC](https://discuss.hashicorp.com/t/docker-cap-sys-admin-and-connect/33763 "2022-01-02T14:41:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![fred-gb](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/fred-gb/32/10243_2.png) [@fred-gb](https://discuss.hashicorp.com/u/fred-gb)\
**Post date:** [January 2, 2022, 2:41pm UTC](https://discuss.hashicorp.com/t/docker-cap-sys-admin-and-connect/33763/1 "2022-01-02T14:41:04Z")

</div>

Hello,

Nomad: 1.2.3

When I add to nomad configuration caps SYS\_ADMIN to docker, I get error on connect-proxy service.

client.hcl:

```auto
    options = {
        "driver.raw_exec.enable" = "true"
        "docker.privileged.enabled" = "true"
        "docker.volumes.enabled" = "true"
        "docker.cleanup.image.delay" = "1h"
        "docker.caps.allowlist" = "SYS_ADMIN"
    }

```

part of job:

```auto
    task "{{ app_name }}" {
        driver = "docker"
        config {
            image = "{{ image_docker }}"

            cap_add = ["SYS_ADMIN"]

            devices = [
                {
                  host_path = "/dev/fuse"
                  container_path = "/dev/fuse"
                }
              ]

            security_opt = [
              "apparmor:unconfined",
            ]
        }

```

Errors logs:

```auto
chown: changing ownership of '/dev/stdout': Operation not permitted
chown: changing ownership of '/dev/stderr': Operation not permitted
chown: changing ownership of '/dev/stdout': Operation not permitted
chown: changing ownership of '/dev/stderr': Operation not permitted
chown: changing ownership of '/dev/stdout': Operation not permitted
chown: changing ownership of '/dev/stderr': Operation not permitted

```

And I have no work connect-proxy.

Thanks… 😧