That is a benefit over DIND and socket sharing, however it doesn't allow for running containers or K8s itself within a job. Any tooling that depends on running

That is a benefit over DIND and socket sharing, however it doesn't allow for running containers or K8s itself within a job. Any tooling that depends on running "docker" (the CLI) will also break or need adapting. This also comes to mind: "root in the container is root on the host" - https://suraj.io/post/root-in-container-root-on-host/ https://suraj.io/post/root-in-container-root-on-host/