3 ms·
`docker` implies access to the Docker daemon, which is not an improvement over the setuid binaries anderspitman found distasteful. https://docs.docker.com/engi
by willglynn 6y ago
`docker` implies access to the Docker daemon, which is not an improvement over the setuid binaries anderspitman found distasteful.
https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface https://docs.docker.com/engine/security/security/#docker-dae...
- lxdquestion 6y agoGenuine question, would LXD be any better? I'm not an expert in containerization but I find it really interesting. There are some blogs that talk about how to do this: https://blog.simos.info/how-to-easily-run-graphics-accelerated-gui-apps-in-lxd-containers-on-your-ubuntu-desktop/ https://blog.simos.info/how-to-easily-run-graphics-accelerat...
- sadfklsjlkjwt 6y agoIf it runs in the same Xwindows session no.
- deleted 6y ago[deleted]
- folmar 6y agoIf your docker is in fact podman your rootless might be attainable.