Merge pull request #340 from jihchi/add_how_to_run_container_wo_sys_a…

…dmin

Add how to run container w.o. sys admin

README.md

@@ -24,6 +24,17 @@ docker run --cap-add=SYS_ADMIN ghcr.io/jihchi/mermaid.ink
 
 Go to http://localhost:3000
 
+If you don't / can't add `--cap-add=SYS_ADMIN` to the command, please refer to [3 ways to securely use Chrome Headless with this image](https://github.com/Zenika/alpine-chrome?tab=readme-ov-file#3-ways-to-securely-use-chrome-headless-with-this-image) to find the most suitable solution for your case.
+
+### With `seccomp`
+
+For example, you can use [Jessie Frazelle seccomp profile for Chrome](https://github.com/Zenika/alpine-chrome/blob/master/chrome.json):
+
+```
+wget https://raw.githubusercontent.com/jfrazelle/dotfiles/master/etc/docker/seccomp/chrome.json
+docker run --security-opt seccomp=$(pwd)/chrome.json ghcr.io/jihchi/mermaid.ink
+```
+
 ## Troubleshooting
 
 ### I'm getting back `HTTP 431 Request Header Fields Too Large` error