2 ms·
s/nearly// From https://zwischenzugs.com/2015/06/24/the-most-pointless-docker-command-ever/ https://zwischenzugs.com/2015/06/24/the-most-pointless-docke... any
by raesene9 4y ago
s/nearly//
From https://zwischenzugs.com/2015/06/24/the-most-pointless-docker-command-ever/ https://zwischenzugs.com/2015/06/24/the-most-pointless-docke... anyone with Docker access gets root with that command.
TBH out of the box Kubernetes is as bad, or worse than docker, in that anyone with create pod permissions can get root on every worker node in the cluster (and the control plane nodes if it's unmanaged Kubernetes) https://raesene.github.io/blog/2019/04/01/The-most-pointless-kubernetes-command-ever/ https://raesene.github.io/blog/2019/04/01/The-most-pointless...
- fuuffsjccgf 4y agoI love how all use cases for this is to simply run some command as a user without write permission to anything. We evolved sysadmin oposing thumbs called virtual machines just to deal with our environment making it cheaper to emulate an entire other computer instead of dealing with having a user without write access, guaranteed, on the FS.