added privileged option to docker run