Good article for some basic rules to keep your containers safe. That being said, I violate rule #1 all the time. If you want to have containers that launch oth

Good article for some basic rules to keep your containers safe. That being said, I violate rule #1 all the time. If you want to have containers that launch other containers (we do that for Apache Airflow), you don't have much other choice. Also, cAdvisor requires that mount for monitoring. Of course, if you're running containers in a ephemeral VM, no biggie.