diff --git a/first_run.sh b/first_run.sh
index af546b3..5365ddf 100755
--- a/first_run.sh
+++ b/first_run.sh
@@ -6,7 +6,10 @@ docker run \
     -it \
     --rm \
     --hostname ${FREEIPA_HOST} \
-    --volume ${SERVICE_DATA}:/data \
+    --volume ${SERVICE_DATA}:/data:Z \
+    --volume /sys/fs/cgroup:/sys/fs/cgroup:ro \
+    --privileged \
+    --security-opt seccomp:unconfined \
     --publish "443:443" \
     --publish "389:389" \
     --publish "636:636" \