readme: note for cap_net_bind_service+eip

shoenig · Jan 16, 2023 · 8d2189f · 8d2189f
1 parent 88069ea
commit 8d2189f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -207,6 +207,14 @@ sudo systemctl start donutdns          # start donutdns service in systemd
 sudo systemctl status donutdns         # inspect status of donutdns service in systemd
 ```
 
+#### bind to port 53
+
+When running as non-root user, we must set CAP_NET_BIND on the donutdns binary.
+
+```
+sudo setcap CAP_NET_BIND_service+eip /opt/bin/donutdns
+```
+
 #### as a docker container
 
 `donutdns` is available from [Docker Hub](https://hub.docker.com/repository/docker/shoenig/donutdns/general)