title: How to get SYS_PTRACE on AWS Elastic Beanstalk with Amazon Linux 2, single-container, no Docker Compose
body: <p>I need to do get the SYS_PTRACE kernel capability on my docker container. Here's the Docerrun.aws.json:</p>
  <pre><code>{
    &quot;AWSEBDockerrunVersion&quot;: &quot;1&quot;,
  
    &quot;Authentication&quot;: {
      &quot;Bucket&quot;: &quot;some-bucket&quot;,
      &quot;Key&quot;: &quot;somekey&quot;
    },
    &quot;Image&quot;: {
      &quot;Name&quot;: &quot;somename&quot;,
      &quot;Update&quot;: &quot;true&quot;
    },
    &quot;Ports&quot;:[
           {
            &quot;HostPort&quot;: 80,
            &quot;ContainerPort&quot;: 80
           },
           a few more ports
      ]
      }
  
  </code></pre>
  <p>Remember, this is Amazon Linux 2, which is a whole new distribution and EB platform. We're not using Docker Compose (wherein you could add that to the yml).</p>
  <p>I tried just adding in the following section:</p>
  <pre><code>&quot;linuxParameters&quot;: {
        &quot;capabilities&quot;: {
          &quot;add&quot;: [&quot;SYS_PTRACE&quot;]
          }
        }
  </code></pre>
  <p>It was simply ignored.</p>
  <p>Thanks!</p>