True, but remember the wise words of Dan Walsh "Containers Don't Contain" in that if you run as root inside of a container without careful consideration, bad us

True, but remember the wise words of Dan Walsh "Containers Don't Contain" in that if you run as root inside of a container without careful consideration, bad users can absolutely break out, just like in a chroot. http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-secure-non-root-user-container/ http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-s... http://www.projectatomic.io/blog/2014/09/yet-another-reason-containers-don-t-contain-kernel-keyrings/ http://www.projectatomic.io/blog/2014/09/yet-another-reason-... In newer docker, the defaults are really good, but even then, it is worth reading up.