add correct run instructions (with --priviledged)