2 ms·
> Needing to be root is a major deficiency though Note: Linux also needs root for its namespaces. Or at least CAP_SYS_SYSADMIN, which grants enough that it's p
by ori_b 5y ago
> Needing to be root is a major deficiency though
Note: Linux also needs root for its namespaces. Or at least CAP_SYS_SYSADMIN, which grants enough that it's pretty much as good as root. See setns(2) and clone(2) for details. This is one of the complaints the plan 9 people have always had with Linux namespaces.
- shatteredgate 5y agoNot anymore, unprivileged user namespaces make it so you don't have to do that. That's how podman's "rootless containers" are able to work.