3 ms·
It means you don't need to be root to run it.
by rythie 4y ago
It means you don't need to be root to run it.
- coffeekid 4y agoYou can also call docker commands by being part of the docker group IIRC. Doesn't this have more to do with the daemon that the user executing commands ?
- q3k 4y ago> You can also call docker commands by being part of the docker group IIRC. Which effectively gives you root on the host.
- prmoustache 4y agoWhich is an horrible practice and has roughly the same attack surface as login as root all the time.
- rythie 4y agoWith podman there is no daemon, everything is running as you. The standard setup for docker has a daemon running as root, which means when you start a container it has root privileges.