4 ms·
all containers require root. docker and the rootless nonsense is just root daemons and suid. ...would never have believed marketing lies would reach linux too
by 1oooqooq 2y ago
all containers require root.
docker and the rootless nonsense is just root daemons and suid.
...would never have believed marketing lies would reach linux tools if anyone told me this before 2018.
- Imustaskforhelp 2y agoyou can theoretically run a virtual machine like libriscv5 which doesn't require root. or qemu doesn't require root as well. But qemu is blocked for my usecase. There is flatpak theoretically as well There is podman but it requires one time root.
- 1oooqooq 2y agoqemu is great but it's a VM, not a container.
- yjftsjthsd-h 2y agoLinux user namespaces can be used to create containers without having root access, see ex. https://unix.stackexchange.com/questions/66084/simulate-chroot-with-unshare https://unix.stackexchange.com/questions/66084/simulate-chro... There's also https://github.com/termux/proot-distro https://github.com/termux/proot-distro which may or may not count as containers depending on how you define the word but I think it does count
- 1oooqooq 2y agoyou can't detach your username from a process, nor the network ns... etc, etc, etc. yeah you can do some smaller fakechroot and maybe some bind mounts... if you call that a "container" good for you.
- yjftsjthsd-h 2y ago> you can't detach your username from a process, nor the network ns... etc, etc, etc. Sure looks like it works? $ unshare -i -n -p -u -T -r -f # ls # id gid=0(root) groups=0(root),65534(nogroup) # ip -br a lo DOWN > yeah you can do some smaller fakechroot and maybe some bind mounts... if you call that a "container" good for you. Why are you being condescending about what constitutes a container?