services: app: cap_add: - SYS_PTRACE command: sleep infinity init: true security_opt: - seccomp:unconfined version: '3.8'