3 ms·
From a security perspective, a daemon is a nightmare. It makes so much more sense to inherit the permissions from the process it’s launched from, and as such I’
by stingraycharles 5y ago
From a security perspective, a daemon is a nightmare. It makes so much more sense to inherit the permissions from the process it’s launched from, and as such I’m a big proponent of podman (or rkt in a distant past).
- zaphirplane 5y agothere is more to it. If you are running kubernetes there are k8s daemons already possibly CRI-O containerd Otherwise the pod is started by systemd, which is another daemon A Started from the command line using podman, is not a production pattern
- JMS2021 5y agoCorrect. We are not allowed any command line access to worker nodes or containers. If it isn't deployed using automation, it isn't deployed.