4 ms·
I work in a big corp where people aren't allowed root access under any circumstances. Podman works for us because infosec guys are happy.
by rr808 3y ago
I work in a big corp where people aren't allowed root access under any circumstances. Podman works for us because infosec guys are happy.
- viraptor 3y agoFor the Mac context, you're running a VM as root before you even touch podman/docker. I'm confused how that's different.
- LeBit 3y agoAre you sure the podman machine's VM is running as root?
- viraptor 3y agoKinda, a bit, it's hard. So podman will need virtualisation and networking permissions to do its job. Also the directory mapping seems to work without extra confirmation. At that point, who needs root? You control the main user`s files, networking, and can effectively hide any process from easy inspection by using virtualisation.
- rr808 3y agoI'm talking servers. We aren't allowed to run either on workstations.
- deleted 3y ago[deleted]