add flag of privileged mode

pkg/container/docker_run.go

@@ -40,6 +40,7 @@ type NewContainerInput struct {
 	Stdout      io.Writer
 	Stderr      io.Writer
 	NetworkMode string
+	Privileged  bool
 }
 
 // FileEntry is a file to copy to a container
@@ -261,6 +262,7 @@ func (cr *containerReference) create() common.Executor {
 			Binds:       input.Binds,
 			Mounts:      mounts,
 			NetworkMode: container.NetworkMode(input.NetworkMode),
+			Privileged:  input.Privileged,
 		}, nil, input.Name)
 		if err != nil {
 			return errors.WithStack(err)

pkg/runner/run_context.go

@@ -104,6 +104,7 @@ func (rc *RunContext) startJobContainer() common.Executor {
 			Binds:       binds,
 			Stdout:      logWriter,
 			Stderr:      logWriter,
+			Privileged:  rc.Config.Privileged,
 		})
 
 		var copyWorkspace bool

pkg/runner/runner.go

@@ -28,6 +28,7 @@ type Config struct {
 	Env             map[string]string // env for containers
 	Secrets         map[string]string // list of secrets
 	Platforms       map[string]string // list of platforms
+	Privileged      bool              // use privileged mode
 }
 
 type runnerImpl struct {

pkg/runner/step_context.go

@@ -191,6 +191,7 @@ func (sc *StepContext) newStepContainer(ctx context.Context, image string, cmd [
 		Binds:       binds,
 		Stdout:      logWriter,
 		Stderr:      logWriter,
+		Privileged:  rc.Config.Privileged,
 	})
 	return stepContainer
 }