diff --git a/Dockerfile b/Dockerfile
index 32cb92ab0..d05333e08 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@
 #
 # To run the tailscaled agent:
 #
-#     $ docker run -d --name=tailscaled -v /var/lib:/var/lib -v /dev/net/tun:/dev/net/tun --network=host --privileged tailscale/tailscale tailscaled
+#     $ docker run -d --name=tailscaled -v /var/lib:/var/lib --device /dev/net/tun:/dev/net/tun --network=host --cap-add=NET_ADMIN --cap-add=NET_RAW tailscale/tailscale
 #
 # To then log in:
 #