Could you provide a little more detail? I’ve recently disabled user namespacing on an app I’ve deployed because I couldn’t figure out how to create an encrypted

Could you provide a little more detail? I’ve recently disabled user namespacing on an app I’ve deployed because I couldn’t figure out how to create an encrypted volume from within the container [1]. I think I understand the security implications and I’m comfortable with them, but I’d be really interested to know how user namespacing has saved people from real vulnerabilities in the real world. [1] https://unix.stackexchange.com/questions/557293/how-can-i-make-a-device-available-inside-a-systemd-nspawn-container-with-user-na https://unix.stackexchange.com/questions/557293/how-can-i-ma...