3 ms·
Oddly enough, quite a few people in the runC community (including myself) are working on implementing the ability to start containers without root. If we can ge
by cyphar 11y ago
Oddly enough, quite a few people in the runC community (including myself) are working on implementing the ability to start containers without root. If we can get this to work, it will be brought to Docker and you'll be able to start containers without even needing a daemon running as root (although you'd lose some functionality due to deficiencies in some of the kernel interactions with user namespaces -- but it should be more secure than it is now). It does bother me that the Linux kernel community entirely ignored other container implementations.
- tyingq 11y agoYes, I've been following the progress, and I see the disconnects across the space. Like this issue: https://github.com/systemd/systemd/issues/321 https://github.com/systemd/systemd/issues/321 Appreciate your efforts. It is good to know that there are people pushing to get this working.
- cyphar 11y agoIf you're interested, I've got a WIP branch of runC that actually implements working rootless containers. This is really exciting. I'll be writing a blog post soon. https://github.com/opencontainers/runc/pull/774 https://github.com/opencontainers/runc/pull/774