From 8329e8ec4fa08259a7ca01c61cb130c8beb67b0a Mon Sep 17 00:00:00 2001
From: bjdgyc <bjdgyc@163.com>
Date: Thu, 27 Feb 2025 16:31:17 +0800
Subject: [PATCH] =?UTF-8?q?=E8=AE=BE=E7=BD=AE=20docker=20=E9=9D=9E?=
 =?UTF-8?q?=E7=89=B9=E6=9D=83=E6=A8=A1=E5=BC=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md                  | 13 ++++++++++++-
 server/handler/link_tun.go |  8 ++++----
 server/handler/start.go    |  5 +----
 3 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/README.md b/README.md
index 9746cc8..120dbcc 100644
--- a/README.md
+++ b/README.md
@@ -439,7 +439,18 @@ ipv4_end = "10.1.2.200"
        --ip_lease=1209600 # IP地址租约时长
    ```
 
-7. 构建镜像 (非必需)
+9. 使用非特权模式启动容器
+   ```bash
+   # 参数可以参考 ./anylink tool -d
+   # 可以使用命令行参数 或者 环境变量 配置
+   docker run -itd --name anylink \
+       -p 443:443 -p 8800:8800 -p 443:443/udp \
+       -v /dev/net/tun:/dev/net/tun --cap-add=NET_ADMIN \
+       --restart=always \
+       bjdgyc/anylink
+   ```
+
+10. 构建镜像 (非必需)
    ```bash
    #获取仓库源码
    git clone https://github.com/bjdgyc/anylink.git
diff --git a/server/handler/link_tun.go b/server/handler/link_tun.go
index 0d41fcc..c1b6ea4 100644
--- a/server/handler/link_tun.go
+++ b/server/handler/link_tun.go
@@ -31,10 +31,10 @@ func checkTun() {
 		base.Fatal("testTun err: ", err)
 	}
 	// 开启服务器转发
-	err = execCmd([]string{"sysctl -w net.ipv4.ip_forward=1"})
-	if err != nil {
-		base.Fatal(err)
-	}
+	// err = execCmd([]string{"sysctl -w net.ipv4.ip_forward=1"})
+	// if err != nil {
+	// 	base.Fatal(err)
+	// }
 	if base.Cfg.IptablesNat {
 		// 添加NAT转发规则
 		ipt, err := iptables.New()
diff --git a/server/handler/start.go b/server/handler/start.go
index 51dc952..7062893 100644
--- a/server/handler/start.go
+++ b/server/handler/start.go
@@ -20,10 +20,7 @@ func Start() {
 	admin.InitLockManager() //初始化防爆破定时器和IP白名单
 
 	// 开启服务器转发
-	err := execCmd([]string{"sysctl -w net.ipv4.ip_forward=1"})
-	if err != nil {
-		base.Fatal(err)
-	}
+	execCmd([]string{"sysctl -w net.ipv4.ip_forward=1"})
 
 	switch base.Cfg.LinkMode {
 	case base.LinkModeTUN: