3 ms·
But if you run stuff as root you already lost, container or not. Why are so many people running containers as root? Is it because they are running whole distros
by justincormack 12y ago
But if you run stuff as root you already lost, container or not. Why are so many people running containers as root? Is it because they are running whole distros that expect that?
User namespaces are going to be really complicated to work with not really convinced they are the panacea people expect. Not running as root is much easier!
- lclarkmichalek 12y agoSure. I'm just saying that running stuff as root is the de-facto standard in the container world; it isn't outside of the docker ecosystem. Take, for example, the docker registry image[0]. Runs as root. In what world, other than the docker world, would that be considered acceptable? [0] https://github.com/docker/docker-registry/blob/0.9.1/Dockerfile https://github.com/docker/docker-registry/blob/0.9.1/Dockerf...