4 ms·
Docker containers aren't very secure because the daemon runs as root by default. Rootless container runtimes are plenty secure, especially if the user that runs
by MrDrMcCoy 2mo ago
Docker containers aren't very secure because the daemon runs as root by default. Rootless container runtimes are plenty secure, especially if the user that runs the container is unprivileged. Easiest thing in the world with Podman.
- ShinyLeftPad 2mo agoWould you run Podman from your own user or another specially created user?
- MrDrMcCoy 2mo agoI would have them run as a user that does not have sudo. The easiest way to do this is by using system-level Podman Quadlets that run as an unprivileged user account. That user will need a real home directory for images and volumes.