3 ms·
> Podman rootless This is the way. Docker rootless and podman rootless. A lot less attack surface than running containers as root. I haven't tried a dedicated
by WhyNotHugo 5y ago
> Podman rootless
This is the way. Docker rootless and podman rootless. A lot less attack surface than running containers as root.
I haven't tried a dedicated user for this though. I'm sure that mounting volumes would get messed up.
- 2OEH8eoCRo0 5y agoI run services like Plex or DNS adblocker in this manner. Each service gets its own user to run rootless under and inside the container the app doesn't run as root. Security is layers.