4 ms·
Just create a user in the Dockerfile, change to him and chroot the container application directory to the created user
by jxub 8y ago
Just create a user in the Dockerfile, change to him and chroot the container application directory to the created user
- fulafel 8y agoThis only works if you trust all your docker images and audit them for root processes. Even then you still have setuid binaries and other privilege escalation risks, if you inherit from dockerhub images etc.