diff --git a/dist/images/Dockerfile b/dist/images/Dockerfile
index 173ea07929e..169abebf4d3 100644
--- a/dist/images/Dockerfile
+++ b/dist/images/Dockerfile
@@ -51,8 +51,8 @@ COPY 01-kube-ovn.conflist /kube-ovn/01-kube-ovn.conflist
 
 WORKDIR /kube-ovn
 
+COPY kube-ovn-speaker /kube-ovn/kube-ovn-speaker
+COPY kube-ovn-pinger /kube-ovn/kube-ovn-pinger
 COPY kube-ovn /kube-ovn/kube-ovn
 COPY kube-ovn-daemon /kube-ovn/kube-ovn-daemon
-COPY kube-ovn-pinger /kube-ovn/kube-ovn-pinger
 COPY kube-ovn-controller /kube-ovn/kube-ovn-controller
-COPY kube-ovn-speaker /kube-ovn/kube-ovn-speaker
diff --git a/dist/images/install.sh b/dist/images/install.sh
index b3769cf21fb..a75d2b37dd7 100644
--- a/dist/images/install.sh
+++ b/dist/images/install.sh
@@ -1044,8 +1044,8 @@ spec:
           - --network-type=$NETWORK_TYPE
           - --default-interface-name=$VLAN_INTERFACE_NAME
         securityContext:
-          capabilities:
-            add: ["NET_ADMIN", "SYS_ADMIN", "SYS_PTRACE"]
+          runAsUser: 0
+          privileged: true
         env:
           - name: POD_IP
             valueFrom:
diff --git a/yamls/kube-ovn-ipv6.yaml b/yamls/kube-ovn-ipv6.yaml
index af27bac0acc..889a7cef7b3 100644
--- a/yamls/kube-ovn-ipv6.yaml
+++ b/yamls/kube-ovn-ipv6.yaml
@@ -130,8 +130,8 @@ spec:
             - --mtu=1420
           imagePullPolicy: IfNotPresent
           securityContext:
-            capabilities:
-              add: ["NET_ADMIN", "SYS_ADMIN"]
+            runAsUser: 0
+            privileged: true
           env:
             - name: POD_IP
               valueFrom:
diff --git a/yamls/kube-ovn.yaml b/yamls/kube-ovn.yaml
index 3d232a35e9a..6ca6df874ba 100644
--- a/yamls/kube-ovn.yaml
+++ b/yamls/kube-ovn.yaml
@@ -129,8 +129,8 @@ spec:
         args:
           - --enable-mirror=true
         securityContext:
-          capabilities:
-            add: ["NET_ADMIN", "SYS_ADMIN", "SYS_PTRACE"]
+          runAsUser: 0
+          privileged: true
         env:
           - name: POD_IP
             valueFrom: