>but I’m aware that whatever I’m running could break out If you have a working docker escape exploit at hand, that works on unprivileged containers, you can ea

>but I’m aware that whatever I’m running could break out If you have a working docker escape exploit at hand, that works on unprivileged containers, you can earn some good money. Just saying. Docker was not created as a sandbox, but people rely on it for security and it is a sandbox at this point. Hell, containerd is one of kuberbetes backends and it absolutely relies on it being a secure sandbox.