From b681e1002aaaf6fb35adba1de802c91e05015c86 Mon Sep 17 00:00:00 2001
From: Andrey Arapov <andrey.arapov@nixaid.com>
Date: Sun, 7 Aug 2016 19:50:02 +0200
Subject: [PATCH] do not mount /dev/shm from host

---
 docker-compose.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 01e6e79..3614de6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -18,11 +18,6 @@ services:
     volumes:
       - /tmp/.X11-unix:/tmp/.X11-unix:ro
       - $XDG_RUNTIME_DIR/pulse:/run/user/1000/pulse
-      # /dev/shm must be RW, otherwise webcam (/dev/video0) won't work
-      # mplayer tv:// -tv driver=v4l2:width=640:height=480:device=/dev/video0
-      #   X11 error: BadAccess (attempt to access private resource denied)
-      #   X11 error: BadShmSeg (invalid shared segment parameter)
-      - /dev/shm:/dev/shm
       - data:/data
       - certs:/home/user/.pki/nssdb
       - $HOME/Downloads:/home/user/Downloads
@@ -46,3 +41,4 @@ services:
     # fixes the: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 0 for /opt/google/chrome/chrome
     ulimits:
       nice: 28
+    shm_size: 4G