3 ms·
How the heck are you running containers without kernel access? Does your software not malloc or read files or you know... execute?
by sophacles 12y ago
How the heck are you running containers without kernel access? Does your software not malloc or read files or you know... execute?
- api 12y agoContainers implement something not unlike SELinux policies. Networking stuff requires the NET_ADMIN permission, which is not set by default.
- wmf 12y agoSetting up networking requires root but so does creating the container so I don't see what the problem is. Using networking doesn't require any special permissions.