[Security] Removing remaining privileged container flags

[charliez0]

Following the successful removal of privileged containers in #8432, we noticed some privileged usage still exists in the codebase (search results).

Would you consider:

1. Comprehensive audit to remove all privileged flags
2. Using granular capabilities instead where needed

This would align with container security best practices and build on the great work already done in #8432.

[liu-shaojun]

Thanks for bringing this up! We'll go through the codebase to identify any unnecessary --privileged usage and remove it. Where needed, we'll replace it with more granular capabilities to align with container security best practices. Appreciate the suggestion!

[charliez0]

any progresses?

[liu-shaojun]

Hi @charliez0

We've submitted a PR to remove the unnecessary --privileged flag on Linux. However, in the Windows + WSL scenario, --privileged is still required for GPU access, so we've kept it for now.

Let us know if you have any further concerns!

Thanks! 🚀