3 ms·
<3 The one thing I've really learned from all of this is just how many different things can break if you take away root privileges from a process. I'm kinda exc
by cyphar 10y ago
<3 The one thing I've really learned from all of this is just how many different things can break if you take away root privileges from a process. I'm kinda excited to see how much of cri-o and kubernetes we can make run as an unprivileged user (especially given how Cloud Foundry has already taken advantage of this).
- SEJeff 10y agoAnd when we finally bridge the containers seriously with criu for container migrations, wow.
- jacques_chester 10y agoI've been nagging anyone who will listen that this ought to be done. (Easy for me: I don't have to do it. I will of course take credit to the fullest extent the law allows.)