Docker swarm service security capabilities

Question

There available some security and resource constraint configuration for docker container applied by running for example docker run -it --cap-add=sys_nice some_image

• https://docs.docker.com/engine/security/seccomp/
• https://docs.docker.com/config/containers/resource_constraints/

Is there way to apply constraints for docker swarm service? docker service create --cap-add=sys_nice some_image fails with message: "unknown flag: --cap-add"

EDIT1: I need to resolve issue mentioned here

Thanks!

Answer 1

Support --cap-add in swarm mode was added recently in docker/cli master branch https://github.com/docker/cli/pull/2687. Not sure that the update was added to the stable version.