refactor: read RYUK_CONTAINER_PRIVILEGED once

Now the environment variable `TESTCONTAINERS_RYUK_CONTAINER_PRIVILEGED`
is read only once, right after the `.testcontainers.properties` is read
in the Docker client creation.

docker.go

@@ -664,6 +664,10 @@ func WithDefaultBridgeNetwork(bridgeNetworkName string) DockerProviderOption {
 
 func NewDockerClient() (cli *client.Client, host string, tcConfig TestContainersConfig, err error) {
  tcConfig = readTCPropsFile()
+ if !tcConfig.RyukPrivileged && os.Getenv("TESTCONTAINERS_RYUK_CONTAINER_PRIVILEGED") == "true" {
+ tcConfig.RyukPrivileged = true
+ }
+
  host = tcConfig.Host
 
  opts := []client.Opt{client.FromEnv}

reaper.go

@@ -73,9 +73,7 @@ func NewReaper(ctx context.Context, sessionID string, provider ReaperProvider, r
  }
 
  tcConfig := provider.Config()
- if tcConfig.RyukPrivileged || os.Getenv("TESTCONTAINERS_RYUK_CONTAINER_PRIVILEGED") == "true" {
- req.Privileged = true
- }
+ req.Privileged = tcConfig.RyukPrivileged
 
  // Attach reaper container to a requested network if it is specified
  if p, ok := provider.(*DockerProvider); ok {