3 ms·

docker daemon has a id remap option called userns-remap https://www.objectif-libre.com/en/blog/2020/06/30/securiser-docker-au-travers-de-la-fonctionnalite-user

• cpuguy83 6y ago
  This is actually worse because the filesystem does not know about user namespaces.