feat: security.nesting for docker (#77)

* feat: security.nesting for docker

* fix: nesting for docker

Author: bketelsen

cli/cmd/launch.go

@@ -478,6 +478,11 @@ func (c *cmdLaunch) launch(app string, instanceName string) error {
 	}
 	extraConfigs := make(map[string]string)
 	deviceOverrides := make(map[string]map[string]string)
+	// enable nesting
+	extraConfigs["security.nesting"] = "true"
+	extraConfigs["security.syscalls.intercept.mknod"] = "true"
+	extraConfigs["security.syscalls.intercept.setxattr"] = "true"
+
 	// set environment variables
 	// SSH Enable
 	if launchSettings.EnableSSH {