3 ms·
The ability to start containers as a normal user ("rootless mode") is quite interesting and imo the most significant feature missing from LXD, which requires yo
by curt15 6y ago
The ability to start containers as a normal user ("rootless mode") is quite interesting and imo the most significant feature missing from LXD, which requires you to either use sudo or be a part of the "lxc" group (equivalent to having sudo privileges).
- mixmastamyk 6y agoWouldn't the lxc group have much more focused permissions than sudo?
- ta988 6y agoYou can mount the root fs in a container and with uid mapping and because the daemon is running as root you can pretty much do whatever you want.
- hda111 6y agoYou can afair configure LXD to disallow escalating privileges via group membership.